Who we are looking for

We are looking for an experienced Insider Threat Investigator to identify, assess, and investigate potential insider threats. The role will analyze security telemetry and data from multiple sources, identify risk patterns, conduct root cause analysis, and translate investigative findings into actionable insights for technical teams and senior stakeholders

What you will be responsible for

As an Insider Threat Investigator you will

Conduct comprehensive investigations analysis in support of the insider threat mandate and in support of GCS policy
Aggregate, analyze and evaluate available data to assess insider threat risk
Complete Root Cause Analysis in support of active investigations
Extract and organize data to build metrics, reports, case studies and trend reports
Conduct analysis of incidents and present findings to a variety of audiences, including senior decision makers
Prepare and produce situational awareness and warning reports related to insider threat

What We Value

These skills will help you succeed in this role

Strong understanding of endpoint, network, and system logs
Strong understanding of SIEM tools and how to use them to retrieve and analyze data
Strong organizational, multi-tasking, and prioritizing skills
Exceptional problem solving and analytical skills
Exceptional report writing skills
Knowledge of Endpoint Detection and Response and Anti Virus tools
Knowledge of Data Loss Prevention tools
Knowledge and understanding of data organizing or structuring complex data across varied data sources
Certification in ITIL concepts and task management tools/systems
Virtual leadership experience with ability to effectively drive results, provide feedback/direction, and manage and build relationships with leaders and team members in a geographically dispersed team environment
Knowledge and understanding of data loss analysis: identification of security events
Knowledge and understanding of data organizing or structuring complex data across varied data sources
Strong organizational, multi-tasking, and prioritizing skills

Education & Preferred Qualifications

5+ years of experience with insider threat analysis and/or investigations and monitoring demonstrated through work, military, or education
5+ years of experience with cyber threat detection platforms
5+ years of experience using ticket tracking tools for change management, problem and incident management, and availability management, demonstrated through work, military, or education
3+ years of experience with insider threat detection platforms
Strong background in intelligence and/or investigations preferred

Additional Requirements

This is an individual contributor role with strong cross-functional collaboration expectations.
The role will require sound judgment when working with sensitive cybersecurity, risk, operational, and regulated data.
The candidate should be comfortable balancing exploratory data science, production-minded analytical delivery, and stakeholder communication.

About State Street

State Street is one of the world's leading providers of financial services to institutional investors, including investment servicing, investment management, investment research, and trading. Technology and cybersecurity are critical enablers of our ability to safeguard information, support clients, and operate at enterprise scale.

We value collaboration, innovation, inclusion, and responsible technology. We are looking for technical talent who can solve meaningful problems, communicate clearly, and help build secure, scalable, data-driven capabilities for the future.

State Street is an equal opportunity and affirmative action employer.

About State Street

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.

We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you'll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.

As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.

Discover more information on jobs at StateStreet.com/careers

Read our CEO Statement

Job ID: R-799038

Insider Threat Investigator - Assistant Vice President