Security Content Specialist

About the role

State Street is seeking a Security Content Specialist to help design, test, and document threat detection content. The role supports the evolution of a proactive, intelligence‑driven detection model that protects the firm, its customers, and partners from sophisticated global threats. Remote work options are available for highly skilled candidates.

Key responsibilities

• Assist with onboarding new detection content and rules while monitoring existing content for duplication.
• Prioritize and manage bug tracking, and work with Security Content Engineers to test and tune use cases in SIEM and EDR platforms.
• Maintain SIEM lookup tables, ensure data freshness, and monitor content metrics for efficiency and retirement decisions.
• Document testing outcomes in Confluence and move validated content to production.
• Partner with Threat Intelligence to align detection strategies with the MITRE ATT&CK framework.
• Collaborate with purple‑team, security, risk, IT, and business stakeholders to validate detection goals.
• Participate in alert creation across EDR, IDS, cloud, email gateways, and other security controls.
• Handle Jira tickets in an agile environment and maintain process documentation.

Required profile

• BS in Cyber Security, IT, Computer Science, or equivalent experience.
• At least 3 years in a cyber‑security role such as SIEM/EDR content engineering, SOC Tier 3, threat hunting, or penetration testing.
• Experience in financial services is a plus.
• Strong documentation and lifecycle management skills.

Required skills

• SIEM and EDR platforms.
• Confluence and Jira for documentation and ticketing.
• MITRE ATT&CK framework knowledge.
• Scripting languages: PERL, Python, PowerShell.