Security Architect, Vice President

State Street
Edinburgh
2 days ago
Create job alert

Job Description This job is with State Street, aninclusive employer and a member of myGwork – the largest globalplatform for the LGBTQ+ business community. Please do not contactthe recruiter directly. Who we are looking for: The State StreetGlobal Cybersecurity team is looking for a Security Architect. TheCybersecurity team delivers platforms, architecture, and tooling tohelp Cybersecurity teams make faster, more informed decisions as wework to secure State Street's digital footprint. As a SecurityArchitect on the Security Architecture Governance Engineering(SAGE) team, you will focus on performing security risk assessmentof in-house developed applications, cloud platforms, and vendorsolutions. You will help define the reference architectures,security technical standards and enforce their adherence enterprisewide. What you will be responsible for: • Conduct comprehensiverisk assessments, threat modelling, and vulnerability analysis toidentify potential security gaps and develop mitigation strategies.• Perform Application Architecture security reviews, documentingrisk assessment finding and proposing remediation. • Help shiftsecurity left by having tollgates in place for security testing tobe done early in SDLC (Software Development Lifecycle) and byensuring security considerations are embedded in early architecturedesigns. • Strong understanding of identity federation (SAML,OAuth, OpenID Connect, etc.) • Designing and documenting reusablesecurity reference architecture patterns. • Develop Technicalsecurity standards, aligning and enforcing these across theorganization. • Work closely with IAM architects, Cloud Architects,Solution Architects, Security teams, and other stakeholders. • Helpharden the security control on cloud landing zone and cloudservices. • Participate in regular security audits and complianceactivities. • Review vendor product security, ensure a sharedresponsibly model is in place. • Help guide teams through thesecurity related governance processes. What we value: • Strongunderstanding of IAM technologies, ITDR, UEBA and behavioranalytics platforms • Hands-on experience in working with AD inboth on-premises and hybrid environments, including Azure AD(Microsoft Entra ID). • Good problem solving and analytical skills.• Knowledge of diagnostic and support tools used in a supportenvironment. • Virtual leadership experience with ability toeffectively drive results, provide feedback/direction, and manageand build relationships with leaders and team members in ageographically dispersed team environment. • Knowledge andunderstanding of data organizing or structuring complex data acrossvaried data sources. • Experience in security engineering, with afocus on hybrid and multi cloud solutions. • Knowledge ofscripting, automation and security analytics, and attack pathanalysis tools. • Hands experience in designing and securingcloud-based solutions and cloud services. • Certifications likeMicrosoft Certified: Azure Administrator Associate or AWS CertifiedSecurity - Specialty can be beneficial. • Experience in design anddocumenting application solution architecture. Education &Preferred Qualifications • You have multiyear (>10 years)experience within Cybersecurity including SecOps, penetrationtesting, security analytics, threat hunting, and/or securityarchitecture. • Bachelor's degree in cyber security, ComputerScience, or related technical discipline, with >6 years ofexperience. • You have experience with security observability andidentity threat monitoring in hybrid cloud environments. • You havea proven ability to Independently drive transformational securityprojects cross-organization. • You have knowledge of securitytesting and penetration testing tools and techniques, and withsecurity analytics tools and platforms. • You are a strongcommunicator who is comfortable working cross-functionally, with atrack record of delivering results and demonstrating strongownership. • Preference for candidates who have had experience insecurity analytics, security research, offensive security, oradvanced threat prevention teams. State Street's Speak Up Line#LI-DNI

Related Jobs

View all jobs

Security Architect

Security Architect

Security architect

Security Architect

Security Architect

Security Architect

Get the latest insights and jobs direct. Sign up for our newsletter.

By subscribing you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

10 Must-Read Cyber Security Books for UK Professionals: Boost Your Career and Stay Ahead of Threats

With rapid advancements in digital infrastructure, cloud computing, and the Internet of Things (IoT), cyber threats continue to evolve at lightning speed. For organisations across the UK—and globally—robust cyber security is no longer optional: It’s a strategic imperative. From healthcare and finance to government agencies and tech start-ups, every sector needs skilled professionals to safeguard critical data and protect users. If you’re looking to break into or advance within the cyber security industry, staying updated on the latest techniques, threat landscapes, and defence strategies is paramount. One of the best ways to build and sharpen your expertise is by reading authoritative, high-quality books that combine foundational knowledge with cutting-edge insights. In this guide, we’ve compiled a list of ten books that cater to various skill levels, spanning ethical hacking and threat intelligence to secure software development and cryptography. By diving into these resources, you’ll fortify your understanding of cyber security fundamentals, explore hands-on techniques for defending systems, and gain the strategic perspective needed to excel in roles throughout the UK’s thriving cyber security landscape.

Navigating Cybersecurity Career Fairs Like a Pro: Preparing Your Pitch, Questions to Ask, and Follow-Up Strategies to Stand Out

In a world where digital threats are escalating and online infrastructure underpins nearly every aspect of our personal and professional lives, cybersecurity has swiftly become one of the most sought-after career fields. Demand for skilled cybersecurity professionals outstrips supply, both in the UK and globally. From ethical hackers and penetration testers to governance, risk, and compliance (GRC) specialists, the opportunities are extensive—and lucrative. Amidst this surge in demand, cybersecurity career fairs provide an invaluable chance to meet potential employers face-to-face, gain industry insights, and make connections that can accelerate your career trajectory. Unlike applying to countless jobs online, these events bring companies, security leaders, and aspiring candidates together under one roof. When approached with the right strategy, a single conversation at a cybersecurity fair can open the door to your dream job. In this comprehensive guide, we’ll explore how to prepare thoroughly, engage confidently, and follow up effectively after a cybersecurity career fair. By incorporating these insights into your approach, you’ll stand out from the crowd and maximise your chances of securing the perfect role in this fast-growing field.

Common Pitfalls Cyber Security Job Seekers Face and How to Avoid Them

The cyber security industry in the UK and worldwide is experiencing rapid growth. With cyber attacks growing in sophistication and frequency, organisations are investing more resources than ever into defending their digital assets. From penetration testers and threat analysts to security architects and compliance officers, cyber security professionals are in high demand across a variety of sectors—including finance, healthcare, government, and retail. Yet, in spite of this high demand, the process of landing a cyber security role can be more challenging than many candidates anticipate. The stakes are high: prospective employers entrust cyber professionals with their most sensitive data, their compliance posture, and often their core business operations. Therefore, they’re looking for candidates who can demonstrate not just technical know-how, but also excellent communication, adaptability, and an awareness of the broader business context. In this article, we’ll explore the most common pitfalls that cyber security job seekers face, especially in the UK market, and how to avoid them. Whether you’re a recent graduate, a professional transitioning from a different field, or an experienced practitioner aiming for a senior role, these insights will help you stand out and secure the opportunities that fit your skill set and career goals.