Wo we are looking for
The Security Engineer will support authorized cybersecurity testing and assessment activities designed to evaluate security controls, identify weaknesses, and support the continuous improvement of cybersecurity capabilities. The role will work with stakeholders across the organization to perform assessments, document results, and support remediation efforts in accordance with approved policies and procedures.

The Security Engineer will participate in a variety of offensive security engagements designed to evaluate security controls, identify weaknesses, and assess organizational resilience. The engineer will work closely with stakeholders across the organization to conduct assessments, communicate results, and support continuous improvement of cybersecurity capabilities.

This role is intended for a developing to intermediate offensive security professional who can execute assigned testing activities, communicate findings effectively, and continue building expertise across multiple security domains.

What You Will Be Responsible For
• Support authorized offensive security assessments and testing activities across a variety of technology environments.
• Perform hands-on testing across applications, infrastructure, identity, cloud, endpoint, and network environments under approved scope and supervision.
• Execute authorized testing activities designed to evaluate security controls and organizational resilience.
• Use security assessment tools and methodologies in accordance with approved testing procedures.
• Ability to collaborate effectively with Red Team peers, defensive security teams, technology stakeholders, and risk partners.
• Prepare technical reports, assessment documentation, executive summaries, and remediation recommendations for stakeholders.
• Collaborate with stakeholders to support risk reduction and continuous improvement initiatives.
• Identify security control gaps and help translate technical observations into practical remediation recommendations.
• Participate in peer review, report quality improvement, and continuous improvement of Red Team procedures, templates, and documentation.
• Maintain awareness of emerging threats, vulnerabilities, offensive techniques, and defensive control patterns relevant to enterprise environments.
• Communicate clearly with technical and non-technical stakeholders while handling sensitive information responsibly.

What We Value

These skills will help you succeed in this role
• Hands-on curiosity and a strong desire to grow as an offensive security practitioner.
• Working knowledge of penetration testing, adversary emulation, and security assessment methodologies.
• Familiarity with common security domains including identity and access management, endpoint security, network security, cloud security, application security, and vulnerability management.
• Ability to follow defined procedures, operate safely, and escalate questions or concerns when scope, authorization, or risk is unclear.
• Strong analytical skills and the ability to connect technical findings to business and security risk.
• Clear written communication, including the ability to document testing steps, evidence, findings, and remediation guidance.
• Ability to collaborate effectively with Red Team peers, defensive security teams, technology stakeholders, and risk partners.
• Commitment to professional conduct, discretion, and careful handling of confidential or sensitive information.
• Willingness to contribute to team process improvements, documentation, tooling, and repeatable operating practices.

Education & Preferred Qualifications
• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or equivalent hands-on security experience.
• 1-2 years of experience in penetration testing, security assessments, offensive security, or related cybersecurity activities.
• Working knowledge of networks, operating systems, cloud technologies, and common security controls.
• Familiarity with penetration testing methodologies, threat-informed testing, or adversary simulation concepts.
• Ability to script or automate tasks using common scripting languages.
• Strong written and verbal communication skills.
• Relevant cybersecurity certifications are preferred but not required.

Salary Range:
$90,000 - $157,500 Annual

The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.

Employees are eligible to participate in State Street's comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans.

For a full overview, visit https://hrportal.ehr.com/statestreet/Home.