SOC Manager – Cyber Defense Center

About the role

State Street seeks to recruit a SOC Manager for its Cyber Defense Center. The SOC Manager will help lead the triage, analysis, and response to cyber‑attacks. Join us in evolving our response capabilities to protect State Street, its customers and partners from ever‑evolving and sophisticated threat actors.

Key responsibilities

• Maintain and lead the cyber incident response process to ensure timely triage, analysis, containment, eradication and return to service for high‑severity or long‑running incidents.
• Manage Analysts and Lead Analysts in Quincy who work a Monday‑to‑Friday shift.
• Support building a high‑performance culture.
• Partner and hand off to the Singapore SOC partner team/manager.
• Continuously update and maintain incident response plans, playbooks and procedures.
• Manage and participate in cyber‑related exercises such as tabletop drills and cyber ranges.
• Measure effectiveness of the incident response process through KRI and KPI metrics.
• Identify methods to continuously enhance the incident response process.
• Acquire and retain cyber talent with a focus on development and training.
• Train and mentor SOC and other Fusion Center personnel.
• Create an environment that drives knowledge sharing across the Fusion Center.
• Help develop the 24/7 Fusion Center “follow‑the‑sun” mindset.

Required profile

• Experience working in or managing a 24/7 cyber security/IT operations function.
• Experience managing diverse, early‑career teams.
• Experience investigating and managing major/complex cyber incidents end‑to‑end.
• Operating‑system administration skills (Windows, Linux, macOS).
• Malware analysis expertise.
• Knowledge of adversarial TTPs and frameworks (NIST, MITRE ATT&CK).
• Strong working knowledge of security technologies such as SIEM, EDR/EPP, AV, ID/PS, HIPS, web proxy/content filtering, AD, PKI and DNS.
• Masters in cyber security, IT, computer science or equivalent experience; relevant certifications (CISSP, CEH, OSCP, OSCE, GCIH).
• 4+ years in a management position in cyber security or IT operations.

Required skills

• Windows, Linux, macOS administration
• Malware analysis
• NIST and MITRE ATT&CK frameworks
• SIEM platforms
• EDR/EPP solutions
• Antivirus (AV)
• Intrusion detection/prevention (ID/PS)
• Host‑based intrusion prevention (HIPS)
• Web proxy and content filtering
• Active Directory (AD)
• Public Key Infrastructure (PKI)
• Domain Name System (DNS)
• Python scripting
• PowerShell scripting
• SQL querying