This role pays less than
74%
of similar roles. Most pay
$161,250–$216,300
— the shaded band above.
At the midpoint, this role pays about
$161k
versus about
$189k
for comparable roles.
Based on 240 similar postings.
Employer
About State Street
State Street Corporation is one of the world''s largest custodian banks and asset managers, providing investment servicing, investment management, and investment research to institutional investors. Industry: Financial Services & Asset Custody
State Street currently has
206 open roles
on FindRole.
Listed pay typically runs
$120,000–$202,500
across 200 roles with salary data.
Technical Lead, Security Platforms is a senior individual-contributor role focused on evolving critical security platforms for threat detection, incident response, and vulnerability management. You will set the technical direction for a portfolio including endpoint detection and response, extended detection and response, and security automation. Day-to-day responsibilities involve designing automated workflows, managing API integrations, and evaluating AI-driven security capabilities to reduce manual handoffs and improve response consistency. The role requires expertise in Python, PowerShell, REST APIs, JSON, and data transformation while utilizing the MITRE ATT&CK framework for detection engineering. You will collaborate with cross-functional teams to translate operational challenges into durable technical solutions. This position addresses the challenge of building resilient, scalable security infrastructure while managing risks associated with emerging AI technologies within a complex enterprise environment.
Define the architecture, roadmap, and lifecycle standards for enterprise security platforms and integrations.
Design and maintain automated security workflows, playbooks, and API integrations across IT and cloud platforms.
Evaluate, implement, and tune AI-driven detection capabilities while mitigating associated security risks.
Automate high-value tasks to reduce manual handoffs and improve response consistency for the Cyber Fusion Center.
Manage the full lifecycle of security platform initiatives from initial discovery through rollout and continuous improvement.
Measure and report on platform health metrics, including telemetry quality, automation success, and response effectiveness.
Translate operational security challenges into scalable technical solutions and communicate risks to both technical and non-technical partners.
What we're looking for
Typically, 7+ years of relevant experience in cybersecurity engineering, security operations, detection engineering, security-platform engineering, or a related field.
Hands-on experience engineering and optimizing enterprise endpoint detection and response or extended detection and response platforms.
Hands-on experience designing, operating, and integrating security automation or orchestration workflows using APIs, webhooks, scripting, or similar methods.
Experience delivering security technology into operational environments such as SOC, incident response, threat hunting, or detection engineering teams.
Ability to translate operational security needs into scalable technical solutions and communicate decisions, risks, and trade-offs clearly.
Experience with Python, PowerShell, REST APIs, JSON, data transformation, and infrastructure or configuration automation (preferred).
Experience building security-operations workflows for enrichment, investigation, containment, notification, evidence collection, and reporting (preferred).
Experience integrating and improving endpoint-security programs, including platform integrations, deployment, coverage, telemetry quality, policy management, health monitoring, and reporting (preferred).
Splunk
HBSS/Trellix
Ansible
CloudFormation
Python
PowerShell
AWS
DevSecOps
IDS/IPS
Firewalls
VPN
Data Loss Prevention
GitHub
GitLab
SonarQube
SolarWinds
Linux Red Hat
Windows
Agile