Technical Lead, Security Platforms

State Street is seeking a senior, hands-on Technical Security Lead to advance critical security platforms that support enterprise threat detection, incident response, threat hunting, vulnerability management, and insider-risk investigations.

You will help set technical direction for a strategic portfolio spanning endpoint security, security automation, cloud security, and integrated detection and response. In partnership with cybersecurity and enterprise technology teams, you will translate operational needs into resilient, scalable capabilities that deliver measurable outcomes.

This is a senior individual-contributor role with no direct reports. Success requires leading through influence, making sound technical decisions, and guiding complex security programs from strategy and design through implementation, adoption, and ongoing improvement.

This role will help shape the technology foundation of State Street’s Cyber Fusion Center. This work will expand endpoint visibility, strengthen cloud security operations, shorten response times, and improve consistency during security events.

The Technical Security Lead will advance practical automation across endpoint, cloud, identity, detection, incident response, and threat intelligence while helping the organization adopt and secure AI-enabled technologies responsibly.

Success will be reflected in a portfolio of capabilities that is reliable, maintainable, widely adopted, and effective at enterprise scale.

• Shape the technical architecture, roadmap, lifecycle strategy, reliability, and resilience of enterprise endpoint security, security automation, and cloud security capabilities.
• Lead major technical initiatives through discovery, evaluation, design, implementation, operational adoption, and continuous improvement.
• Define automation patterns and use cases across endpoint, cloud, identity, detection, incident response, and threat intelligence.
• Build and enhance cloud and endpoint security automations using cloud-native APIs, event-driven workflows, infrastructure-as-code and configuration-management practices, and operational response processes.
• Strengthen endpoint security coverage and telemetry quality while improving policy governance, platform health, integrations, and day-to-day operability.
• Partner with security teams to prioritize high-value opportunities, redesign manual processes, standardize workflows, and drive operational adoption.
• Assess emerging technologies, including AI-enabled security capabilities, for business value, technical fit, and associated security, data, and operational risks.
• Establish and report measures of platform health and operational impact, including coverage, workflow reliability, automation success, and response effectiveness.
• Provide technical leadership and mentorship, document key architecture decisions, and communicate recommendations, risks, and trade-offs clearly to technical and nontechnical stakeholders.

• The strongest candidates will bring curiosity, practical judgment, and a commitment to building reliable solutions that make security teams more effective.
• A practical, hands-on approach to endpoint, automation, and cloud security challenges, grounded in an understanding of operational constraints and trade-offs.
• A collaborative style that builds trust, invites constructive challenge, and creates alignment across technical and nontechnical teams.
• An automation mindset that identifies repetitive work, preserves human judgment where needed, and improves speed and consistency without unnecessary risk.
• Calm, reliable execution during time-sensitive security situations, supported by clear communication, effective prioritization, and strong…