Threat Assurance Analyst

About the role

We are looking for a Threat Assurance Analyst (AVP) to join the Assurance Analysis team – a new team working at the intersection of threat intelligence, testing and controls. This role will be focused on interacting with internal and external testing partners and control owners as we source, transform and interpret data from our stakeholders to understand enterprise posture and provide assurance insights to our cyber partners and leadership.

Responsibilities

• Engage technical control owners to source their mapped control data, translating and mapping their policies to industry frameworks (e.g. MITRE ATT&CK).
• Engage testing and partner teams (Pen Test, Red Teams, Purple Teams) to accurately define and map testing results to internal data models.
• Interpret testing results alongside relevant defensive strengths and shortfalls in controls.
• Work with Blue Team partners (SOC, Detection Engineers) to gain additional data – testing outcome enrichment and control insights.
• Maintain dashboards and data models that inform stakeholders of assurance activities and enterprise posture.
• Design and apply AI-assisted workflows to accelerate analysis while validating outputs to ensure data accuracy and integrity.
• Assist in feature development, working with product and data teams to mature assurance tooling and processes.
• Communicate assurance from the threat perspective, translating policies into threat impact and defensive coverage for technical and leadership audiences alike.
• Produce and maintain clear documentation of data sources, schema definitions, mapping logic, transformations and analytical decisions to ensure work is transparent, repeatable and auditable.
• Keep a finger on the pulse of industry framework changes to help partner teams stay unified and up to date.

Requirements

The ideal candidate has a diverse cyber background with previous experience in – or a genuine appreciation for – cyber data analytics and science. They are expert enough to interpret the outputs of partner teams, yet independent enough to produce their own analysis.

Qualifications

• Familiarity with the MITRE ATT&CK framework.
• Data analytics experience with proven application in the cyber field.
• Experience with Python, SQL and Power BI.
• Strong communication skills, with the ability to tailor technical detail to varied audiences.
• A disciplined approach to documentation, capable of producing clear, reusable records that support tracking, auditability and governance.

Skills

• Familiarity with the MITRE ATT&CK framework.
• Data analytics experience with proven application in the cyber field.
• Experience with Python, SQL and Power BI.
• Strong communication skills, with the ability to tailor technical detail to varied audiences.
• A disciplined approach to documentation, capable of producing clear, reusable records that support tracking, auditability and governance.

Benefits

Salary Range: $90,000 - $157,500 Annual

Employees are eligible to participate in State Street’s comprehensive benefits program, which includes:

• our retirement savings plan (401K) with company match;
• insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages;
• paid-time off including vacation, sick leave, short term disability, and family care responsibilities;
• access to our Employee Assistance Program;
• incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans);
• and, eligibility for certain tax advantaged savings plans.

For a full overview, visit https://hrportal.ehr.com/statestreet/Home.