Senior Security Engineer, Cyber Defense Platforms - Assistant Vice President

Who we are looking for We are looking for a seasoned security professional who combines deep technical expertise with strong security judgement. You are someone who understands that endpoint security and data security are inseparable, and that effective protection requires policy, technology, detection, and response. Why this role is important to us Endpoints and data remain the most frequently targeted entry points for modern cyber threats—ransomware, insider risk, and data exfiltration. As organizations adopt hybrid work, cloud services, and SaaS platforms at scale, traditional perimeter‑based security is no longer sufficient. This role is critical to ensuring: Enterprise endpoints are resilient, hardened, and continuously monitored Sensitive data is protected wherever it resides or flows Security controls are enforceable, measurable, and audit‑defensible Zero Trust and least‑privilege principles are applied in real, operational terms The Endpoint Security and Data Security Expert directly contributes to reducing business risk, protecting intellectual property, and ensuring regulatory compliance across the organization. What you will be responsible for Primary responsibilities: Perform hands‑on endpoint hardening activities to reduce enterprise attack surface across workstations and servers by enforcing secure configurations, minimizing unnecessary services, and supporting execution control mechanisms under established standards and guidance. Support application execution control and endpoint attack surface reduction through day‑to‑day administration of Airlock application allowlisting, including policy updates, rule maintenance, and exception handling following approved processes Review, triage, and process Airlock allowlisting requests from application and infrastructure teams, performing technical validation and escalating complex or high‑risk cases to senior engineers as required. Assist with maintaining endpoint security baselines by implementing configuration changes, validating compliance, and documenting deviations or operational impacts. Provide operational support for endpoint security tooling and platforms, including troubleshooting enforcement issues, validating allowlisting behavior, and supporting audit and compliance evidence collection Participate in a scheduled on‑call rotation, providing after‑hours and weekend support for: Endpoint hardening or execution control issues Secondary responsibilities: Collaborate with Network Security (NetSec) teams as needed to support endpoint‑to‑network exposure reduction efforts, such as restricted protocol usage, connectivity dependencies, or Zero Trust enforcement impacts. Support Data Security (DataSec) initiatives by assisting with endpoint controls that help protect sensitive data, including prevention of unauthorized tools and alignment with approved software and data protection policies What we value These skills will help you succeed in this role Deep expertise in endpoint security architecture Strong understanding of endpoint attack surface techniques Experience in Airlock implementation is an added advantage Experience integrating with SIEM and incident response workflows Good understanding of encryption and networking concepts Education & Preferred Qualifications Graduate degree, preferably in computer science 14+ years of overall experience with at least 5 years in cyber security CISSP certification is an added advantage Strong communication and stakeholder management skills Additional requirements Work Requirement Hybrid work environment – required to be in office 3 days a week Expected to work ether between 12:00 PM to 09:00 PM IST or 02:00 PM – 11:00 PM IST Flexible in performing weekend maintenance activity as and when required About State Street Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of