Staff Perimeter Defense Engineer

Job summary

You will define and drive the enterprise perimeter security strategy, architecture, and roadmap while leading the implementation of security controls. Additionally, you will partner with cross-functional teams to deploy secure network architectures and enhance detection and response capabilities for perimeter-based threats.

Job details

Who we are looking for We are looking for a Staff Perimeter Defense Engineer reporting into the Defensive Engineering leadership team within Global Cyber Security (GCS). You will lead the strategy, architecture, and engineering of perimeter security capabilities, helping protect the organization from external threats targeting enterprise networks, internet-facing services, applications, and remote access environments. Why this role is important to us The team you will be joining is part of Defensive Engineering within Global Cyber Security, a function that is critical to the company's cybersecurity strategy. As cyber threats continue to evolve, strong perimeter defenses remain essential to protecting the firm's critical systems, applications, and data. This role will drive the technologies, controls, and security capabilities needed to strengthen the organization's defensive posture and reduce risk. What you will be responsible for As a Staff Perimeter Security Defense Engineer, you will: Define and drive the enterprise perimeter security strategy, architecture, and roadmap. Lead the evaluation, implementation, and continuous improvement of perimeter security controls and technologies. Partner with Network Engineering, Infrastructure, Cloud, and Application teams to design and deploy secure network and internet-facing architectures. Collaborate with the Cyber Defense Center (CDC) to enhance detection, investigation, threat hunting, and response capabilities for network and perimeter-based attacks. Lead security initiatives involving next-generation firewalls, web application firewalls (WAF), DDoS protection, secure web gateways, remote access security, API protection, and Zero Trust technologies. Drive integration of perimeter security platforms with SIEM, SOAR, threat intelligence, and security analytics solutions. Develop security standards, architecture patterns, and implementation guidance for perimeter security technologies. Lead proof-of-concepts, product evaluations, and vendor assessments for network and perimeter security solutions. Track and report key metrics related to threat prevention, attack surface reduction, control effectiveness, and risk reduction. Serve as a subject matter expert for perimeter security and defensive engineering initiatives. What we value These skills will help you succeed in this role: Experience with perimeter security technologies such as Zscaler, Palo Alto Networks, Cloudflare, F5, or similar platforms. Strong understanding of network security, perimeter defense, segmentation, secure access, and Zero Trust architectures. Experience securing internet-facing applications, APIs, and remote access services. Familiarity with technologies such as WAF, DDoS protection, ZTNA, SSE, SASE, VPN, and network access controls. Experience integrating security platforms with SIEM, SOAR, and threat intelligence solutions. Strong analytical, troubleshooting, automation, and problem-solving skills. Excellent communication and stakeholder management skills. Education & Preferred Qualifications Bachelor's degree in Computer Science, Information Security, Engineering, or a related field, or equivalent practical experience. 8+ years of experience in cybersecurity, network security, security engineering, or security architecture. 5+ years of hands-on experience designing and implementing perimeter security technologies and controls. Experience working in financial services or other regulated industries preferred. Relevant certifications such as CISSP, CCSP, PCNSE, CCNP Security, or equivalent preferred. Additional Requirements Experience developing security strategies, roadmaps, and architecture standards. Experience assessing emerging threats and translating risks into security controls and engineering priorities. Familiarity with cloud and hybrid network security architectures. Strong collaboration skills and ability to work across Cyber Security, Infrastructure, Cloud, and Engineering organizations. Work Requirement Hybrid work model in accordance with company policy. Ability to collaborate effectively with global teams across multiple time zones. Standard business hours with flexibility to support critical security incidents and initiatives when required. Salary Range: $120,000 - $202,500 Annual The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ. Employees are eligible to participate in State Street’s comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans. For a full overview, visit https://hrportal.ehr.com/statestreet/Home. About State Street Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success. We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future. As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law. Discover more information on jobs at StateStreet.com/careers Read our CEO Statement Job Application Disclosure: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

What you’ll do

You will define and drive the enterprise perimeter security strategy, architecture, and roadmap while leading the implementation of security controls. Additionally, you will partner with cross-functional teams to deploy secure network architectures and enhance detection and response capabilities for perimeter-based threats.

Requirements

The role requires a bachelor's degree in a related field and over 8 years of experience in cybersecurity or network security. Candidates must possess hands-on experience with perimeter defense technologies and demonstrate strong analytical and communication skills.

Benefits

• Retirement savings plan
• 401k with company match
• Life insurance
• Medical insurance
• Dental insurance
• Vision insurance
• Long-term disability insurance
• Paid time off
• Sick leave
• Short term disability
• Employee assistance program
• Incentive compensation
• Performance-based awards

Listed skills

• Stakeholder Management · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Perimeter security
• Network security
• Zero trust
• Firewall management
• WAF
• DDoS protection
• Cloud security
• API protection
• SIEM
• SOAR
• Threat intelligence
• Automation
• Stakeholder management
• Cybersecurity strategy
• Architecture design
• Life Support
• Communication
• Problem Solving
• Troubleshooting (Problem Solving)
• Stakeholder Management
• Leadership
• Continuous Improvement Process
• Financial Services
• Firewall
• Network Security
• IT Security Architecture
• Collaboration
• Sales
• Application Programming Interface (API)
• Security Controls
• Computer Science
• Cyber Security
• Investigation
• Institutional Investing
• Attack Surface Management
• Security Information And Event Management (SIEM)
• Certified Information Systems Security Professional
• Time Off Management
• Employee Assistance Programs
• Virtual Private Networks (VPN)
• Cyber Threat Intelligence
• Cyber Defense
• Network Engineering
• Risk Reduction
• Security Engineering
• Security Strategies
• Cyber Security Strategy
• Security Solutions
• Zero Trust Architecture (ZTA)
• Access Network

Job areas

• Technology
• Security & Safety
• Engineering
• Software
• Cyber Defense Engineer
• Cyber Security Architect
• Database and Network Professionals Not Elsewhere Classified
• Information Security Engineers
• Computer Occupations, All Other

More jobs from State Street