Who We Are Looking ForState Street is seeking a motivated and intellectually curious Cryptographic Agility Surveillance Analyst to support the development and operation of the firm's Cryptographic Agility Surveillance Program.
The Cryptographic Agility Surveillance Program is a centralized capability that continuously monitors, collects, and analyzes cryptographic intelligence to help the organization understand and respond to changes in the cryptographic landscape. By identifying emerging risks such as algorithm deprecation, protocol vulnerabilities, advances in quantum computing, regulatory developments, and industry best practices, the program enables informed decision-making and supports the long-term resilience of State Street's cryptographic controls.
As a Cryptographic Agility Surveillance Analyst, you will help gather, analyze, and report on cryptographic risks and trends that could impact the firm's security posture. Working closely with encryption engineers, security architects, risk partners, and technology teams, you will contribute to maintaining the effectiveness of cryptographic controls and support strategic initiatives that strengthen State Street's cyber resilience.
What You Will Be Responsible For- Monitor industry, regulatory, vendor, and academic sources for emerging cryptographic threats, vulnerabilities, standards changes, and technology developments.
- Track developments related to encryption algorithms, cryptographic protocols, post-quantum cryptography (PQC), key management, digital certificates, and cryptographic libraries.
- Research and summarize cryptographic intelligence from multiple sources and communicate findings to technical and non-technical stakeholders.
- Assist in the identification and assessment of cryptographic risks that may impact applications, infrastructure, or security controls.
- Support the creation of intelligence reports, risk summaries, dashboards, metrics, and presentations for security and technology teams.
- Maintain inventories, datasets, and documentation used to support cryptographic risk monitoring and analysis activities.
- Participate in periodic reviews of external advisories, standards publications, and vendor security announcements.
- Support investigations into newly identified cryptographic weaknesses and help document potential business impacts.
- Collaborate with engineering and architecture teams to understand cryptographic implementations and support remediation planning efforts.
- Contribute to evidence gathering and reporting activities that support internal governance, audit, and regulatory requirements.
- Assist in maintaining processes, playbooks, and operating procedures that support the Cryptographic Agility Surveillance Program.
- Collaborate with other Cyber Threat Intelligence teams to establish consistent and mature threat intelligence processes and tooling.
- Ability to apply the Admiralty System to establish and manage source reliability and information credibility to enhance automated processing of expansive, continuously collected intelligence.
- Continuously build knowledge of cryptographic concepts, cybersecurity trends, and emerging technologies.
What We Value- A strong interest in cybersecurity, cryptography, threat intelligence, or technology risk management.
- Analytical thinking and the ability to evaluate technical information from multiple sources.
- Curiosity and a desire to understand how emerging technologies and industry developments impact security risk.
- Strong written and verbal communication skills, with the ability to summarize technical topics clearly and concisely.
- Attention to detail and a disciplined approach to research, documentation, and data analysis.
- A collaborative mindset and willingness to work across multiple teams and stakeholder groups.
- An eagerness to learn and develop skills in cryptography, encryption technologies, and cybersecurity operations.
- Ability to manage multiple work items while maintaining high-quality deliverables.
- Professionalism, integrity, and a commitment to protecting confidential information.
- A continuous improvement mindset with a willingness to identify opportunities to enhance processes and operational effectiveness.
Education & Preferred Qualifications- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Security, Engineering, Mathematics, or a related field, or equivalent practical experience.
- One to three years of experience in cybersecurity, technology risk, security operations, IT audit, threat intelligence, vulnerability management, or a related field.
- Foundational understanding of cybersecurity principles, encryption, authentication, and data protection concepts.
- Basic knowledge of common cryptographic technologies, including TLS, PKI, certificates, hashing, and encryption.
- Exposure to scripting or programming languages such as Python, PowerShell, Java, JavaScript, C#, or SQL.
- Experience conducting research, data analysis, or technical investigations through academic, internship, or professional experience.
- Knowledge of emerging topics such as post-quantum cryptography, cryptographic asset management, software supply chain security, or cryptographic inventory management.
Salary Range: $70,000 - $118,750 Annual
The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.
Employees are eligible to participate in State Street's comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans.
For a full overview, visit https://hrportal.ehr.com/statestreet/Home.
