Advanced Defensive Architect

Who we are looking for

The Advanced Defensive Architect is a member of a small team tasked with securing the firm’s most critical network environments and applications. The Architect is responsible for designing, implementing, and monitoring the control posture for the critical environments and applications, producing reference models, segments, solutions architecture, and advising teams as they build systems to ensure they are protected and aligned to required reports.

• Executing the vision, strategy, and mission of the Advanced Defensive Architecture organization.
• Reducing security risks by integrating controls aligned with State Street’s goals and objectives into security architecture.
• Understanding and prioritizing essential system capabilities and business functions that must be achieved by a system.
• Determining baseline system security requirements aligned to the criticality of the network environments and applications.
• Developing cybersecurity designs for systems and networks with multiple security levels and processing multiple data classification levels.
• Supporting the Managing Director to understand, manage, and reduce information security risks on behalf of executive leadership.
• Integrating cybersecurity requirements into comprehensive designs, policies, and plans for systems and networks.
• Defining acquisition life‑cycle cybersecurity architecture requirements and security engineering requirements.
• Determining if systems and architecture are consistent with cybersecurity architecture guidelines.
• Performing security reviews of the firm’s most critical network environments and applications.
• Identifying gaps in security architecture of the firm’s most critical network environments and applications.
• Developing a prioritized cybersecurity risk management plan for the firm’s most critical network environments and applications.
• Determining and documenting the impact of new systems, software, and integrations on the system’s cybersecurity posture.
• Creating system security architecture documentation, plans, and projects.
• Identifying metrics and using them to determine cybersecurity design and architecture effectiveness.

• 5years or more experience in Security Architecture, with at least 1year in artificial intelligence and automation.
• Extensive experience translating requirements into security controls.
• Extensive experience performing security architecture analysis.
• Extensive experience evaluating system designs for cyber risk and compliance with control frameworks and principles.
• Proven ability to work remotely, travel when needed, and operate across multiple geographic time zones.
• Extensive experience designing network architecture aligned to security principles and control frameworks.
• Experience with on‑premises, colocation centers, and cloud environments.
• Experience with app migrations from on‑premises data centers to cloud platforms.
• Experience leveraging Cloud Security Posture Management (CSPM) and visibility tools.
• Experience with payment systems or classified network architecture.
• Experience implementing network segmentation.
• Experience coordinating efforts between stakeholders.
• Experience presenting to executive (C‑Suite) audiences.

• Knowledge of cyber security threat actors, their tactics, techniques, procedures, tradecraft, and noteworthy attacks.
• Knowledge of cybersecurity principles and practices, including defense in depth.
• Knowledge of computer network protocols.
• Knowledge of risk management processes.
• Knowledge of cybersecurity law, regulations, and industry best practices.
• Knowledge of system design tools and techniques.
• Knowledge of server administration and principles and practices.
• Knowledge of software engineering principles and practices.
• Knowledge of enterprise information technology (IT) architecture principles, practices, and reference models.
• Knowledge of systems engineering processes, principles and practices.
• Knowledge of hardware and software reverse engineering tools and techniques.
• Knowledge of secure software development, deployment, and maintenance.

• Bachelor’s Degree in computer science,…