The State Street Cyber Architecture & Engineering team is looking for a Head of Cloud Security Engineering. We deliver the tooling and solutions to help secure State Street’s digital footprint. We are looking for a strong leader with deep experience in multi-cloud environments, secure-by-design cloud architectures and controls, and leading a team of DevSecOps or security engineers.
What you will be responsible for
As Head of Cloud Security Engineering, you will:
- Lead a team of cloud security engineers focused on delivering best-in-class solutions to secure State Street cloud environments
- Continue to uplift the security controls across State Street’s multi-cloud ecosystem
- Oversee and advise on cloud service hardening, management of policy-as-code and associated pipelines, cloud security posture monitoring, cloud security consultation and reviews, cloud security enablement activities and cloud security incident response.
- Ensure that the necessary operational and governance hygiene is implemented and maintained (SOPs, reference cloud security architectures, etc)
- Coordinate the day-to-day deployment and management of tooling and controls across cloud environments.
- Partner with our peers within CyberSecurity and Global Technology Services to deliver on cross-functional requirements.
- Manage the audit requirements and associated activities within the Cloud Security Engineering space
- Audit existing services for problems in infrastructure with security, configuration, or other possible issues.
- Mentor cloud security engineers and coordinate training to ensure the Cloud Security Engineering team maintains a high bar of operational excellence.
Requirements:
- Deep knowledge of AWS or Azure, including best practices around security guardrail implementation and service hardening.
- At least 3+ years leading either SRE, DevSecOps or cloud security engineering teams.
- At least 10+ years of SRE or cloud security engineering in public cloud environments.
- Working experience with Containers and Kubernetes within AWS, Azure or OCI cloud infrastructure.
- Experience with compliance frameworks such as NIST 800-53 and CMM.
- Experience aligning cloud security controls to the MITRE framework
- Demonstrated experience with aligning technical architecture and standards/processes to deliver the best user experience.
- Experience with cloud posture management tooling (Wiz, Prisma, etc).
Why this role is important to us
Our Cyber Security function, Global Cyber Security (GCS), is vital to State Street and is the key enabler for our business to deliver data and insights securely to our clients. We’re driving the company’s digital transformation and expanding business capabilities using industry best practices and AI driven, digital-first customer experiences.