Secure Configuration Systems Engineer

State Street

Confirmed live yesterday High trust

Quick summary

Work type
On-site
Location
Quincy, MAToronto, Ontario, CanadaAustin, TXAtlanta, GA
Salary
$90,000–$157,500 / yr
Posted
45 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $173k
This role $124k
$76k most similar roles pay here $217k

This role pays less than 87% of similar roles. Most pay $142,400–$202,625 — the shaded band above. At the midpoint, this role pays about $124k versus about $173k for comparable roles.

Based on 240 similar postings.

Employer

About State Street

State Street Corporation is one of the world''s largest custodian banks and asset managers, providing investment servicing, investment management, and investment research to institutional investors. Industry: Financial Services & Asset Custody

State Street currently has 176 open roles on FindRole.

Listed pay typically runs $120,000–$202,500 across 172 roles with salary data.

Most-posted roles

View all roles at State Street

At a glance

TL;DR · Secure Configuration Systems Engineer

The Secure Configuration Systems Engineer joins the Cyber Architecture & Engineering team to deliver architectural solutions, platforms, and security tooling for the organization's digital footprint. This role focuses on implementing secure configuration best practices, establishing baseline configurations for ITAM assets, and developing custom solutions for configuration controls. The engineer will conduct risk assessments based on the NIST framework and develop security guidelines while collaborating with stakeholders to design robust systems with monitoring and auditing at their core. Key technical requirements include experience with Ansible, Chef Inspec, Terraform, and shell scripting, alongside proficiency in Python or Perl. The role addresses critical infrastructure security by applying STIGs, IAVAs, and CIS hardening guidelines. Candidates will manage the full systems implementation lifecycle to ensure all assets maintain integrity across multi-hybrid cloud environments using DevSecOps and IaC principles.

What you'll do

  • Implement and enforce security configuration best practices across all IT assets.
  • Establish secure baseline configurations for the organization's infrastructure and hardware.
  • Develop custom automation solutions using Ansible, Chef Inspec, and shell scripting for configuration controls.
  • Conduct risk assessments for critical assets based on the NIST framework.
  • Create security guidelines, policies, and procedures for the Secure Configuration framework.
  • Design and implement technical solutions with integrated monitoring, auditing, and reliability features.
  • Evaluate and recommend new technologies to improve platform security and performance.

What we're looking for

  • Bachelor’s degree in Information Technology, computer science, or a related field.
  • 3+ years of relevant experience in industry, government, or consulting roles.
  • Experience with secure configuration management practices, system hardening standards, and systems integrity assurance.
  • Proficiency in one or more scripting languages such as Python or Perl.
  • Experience using automation tools including Ansible, Chef, or Terraform.
  • Knowledge of Information Security standards including STIGs, IAVAs, and CIS hardening guidelines.
  • Experience with cloud DevOps tooling, container native systems, and CI/CD pipelines.
  • Security+ or other cybersecurity or network security certification.

More like this

Similar roles

Systems Security Engineer

Booz Allen Hamilton

Atlanta, GA 58 days ago $69,300$158,000
Python BASH Perl JavaScript Elastic Stack Armis Axonius SIEM Automation NIST SP 800‑53 CIS Controls STIGs LAN WAN Virtualization
8+ yrs exp

Systems Security Engineer

General Dynamics

Taunton, MA 36 days ago $130,617$144,000
Cybersecurity Model-based Systems Engineering (MBSE) Cryptography Encryption Agile AI Systems Engineering Security Requirements Analysis Trade Studies Functional Analysis
5+ yrs exp

Systems Security Engineer

Booz Allen Hamilton

California, MD +1 17 days ago $69,300$158,000
Cybersecurity NIST RMF ACAS Nessus STIG SCAP IP Networking RF Links Vulnerability Scanning Big Data Analytics Systems Engineering Network Security CompTIA Security+ CISSP CEH OSCP

Systems Security Engineer

Booz Allen Hamilton

California, MD +1 17 days ago $69,300$158,000
Cybersecurity NIST RMF ACAS Nessus STIG SCAP IP Networking RF Links Vulnerability Scanning Big Data Analytics Systems Engineering Network Security Security+ CISSP CEH OSCP

Systems Security Engineer

Booz Allen Hamilton

California, MD +1 17 days ago $69,300$158,000
Cybersecurity NIST RMF ACAS Nessus STIG SCAP IP Networking RF Links Vulnerability Scanning Big Data Analytics Systems Engineering Network Security CompTIA Security+ CISSP CEH OSCP