Who we are looking for

As a member of the Emerging Threats team within Global Cyber Security, the Emerging Threats Process Lead will provide process, governance, documentation, and evidence-management support across Red Team, Purple Team, and Threat Hunt Response.

The role will ensure processes, procedures, SOPs, operational records, and supporting evidence are clearly defined, consistently maintained, appropriately approved, and audit-ready.

Working closely with Emerging Threats leadership and technical teams, the specialist will establish consistent documentation and governance practices while ensuring the specific requirements of each function are appropriately captured.

This is not a hands-on offensive security, detection engineering, or threat-hunting role. The focus is process management, documentation, governance, evidence, and audit readiness.

Why this role is important to us

Red Team, Purple Team, and Threat Hunt Response require clear, repeatable, and well-governed processes that demonstrate how activities are authorized, performed, evidenced, reviewed, and reported.

This role provides dedicated oversight of that framework, improving consistency, traceability, and audit readiness across Emerging Threats while supporting effective management and regulatory oversight.

What you will be responsible for

• Develop, maintain, and coordinate review and approval of processes, procedures, SOPs, templates, and supporting guidance across Red Team, Purple Team, and Threat Hunt Response.
• Maintain consistent documentation, governance, evidence, and records-management standards across the three functions.
• Manage the documentation lifecycle, including ownership, review, approval, version control, periodic review, and retirement.
• Maintain operational documentation, including assessment and hunt plans, exercise records, approvals, evidence, findings, remediation records, and final reports.
• Ensure key activities, decisions, approvals, escalations, and outcomes are appropriately documented and supported by evidence.
• Maintain organized records within approved repositories to support traceability and efficient retrieval.
• Coordinate responses to audit, risk, compliance, control assurance, and regulatory evidence requests.
• Identify process, documentation, governance, and evidence gaps and coordinate remediation with the appropriate functional owners.
• Support governance reporting, including KRIs, KPIs, operational metrics, and management reporting.
• Maintain audit readiness across Emerging Threats through complete, current, accessible, and traceable documentation and evidence.

What we value

These skills will help you succeed in this role:

• Strong experience developing and maintaining procedures, SOPs, process documentation, and governance materials.
• Strong technical and business writing skills, with the ability to translate cybersecurity activities into clear and structured documentation.
• Experience with document governance, version control, approvals, periodic reviews, and records management.
• Strong attention to detail and experience maintaining complete and traceable evidence.
• Experience supporting audit, regulatory, risk, compliance, or control-assurance activities.
• Strong analytical and organizational skills with the ability to identify documentation and process gaps.
• Ability to work effectively with cybersecurity leadership, technical teams, risk, compliance, and audit stakeholders.
• Working knowledge of Red Team, Purple Team, Threat Hunt, or related cybersecurity disciplines.
• Experience working in a regulated or highly controlled environment.

Education & Preferred Qualifications

• Bachelor’s degree or equivalent professional experience in cybersecurity, technology, risk, governance, compliance, technical writing, or a related field.
• Two to four years of experience in process management, governance, technical documentation, cybersecurity operations support, risk and control, or audit support.
• Experience developing and maintaining controlled procedures, SOPs, evidence packages, and governance documentation.
• Experience supporting internal or external audit, regulatory examinations, or control-assurance activities.
• Familiarity with cybersecurity operations and Red Team, Purple Team, and Threat Hunt concepts is preferred.
• Experience with enterprise document-management platforms such as Microsoft SharePoint is preferred.
• Strong written communication skills across technical, management, risk, audit, and non-technical audiences.. 

Salary Range:

The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.

Employees are eligible to participate in State Street’s comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans.

For a full overview, visit https://hrportal.ehr.com/statestreet/Home.

About State Street

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.

We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.

As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.

Discover more information on jobs at StateStreet.com/careers

Read our CEO Statement

Job Application Disclosure:

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.