Staff Perimeter Defense Engineer

State Street

. Define and drive the enterprise perimeter security strategy, architecture, and roadmap .

Posted 11/3/2026full-timeUnited StatesLead💰 $120,000 - $202,500 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in defining and implementing perimeter security strategies, architectures, and technologies, with a strong focus on Zero Trust principles and integration with security platforms. Proven ability to collaborate across teams to enhance security posture and respond to emerging threats.

Highest-signal resume keywords

Perimeter Security StrategyZero Trust ArchitectureNetwork Security TechnologiesSecurity Platform IntegrationCybersecurity Leadership

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Perimeter Security TechnologiesNetwork SecuritySecurity EngineeringThreat Intelligence IntegrationDDoS ProtectionWeb Application Firewall (WAF)API ProtectionSecure AccessAutomationRisk Assessment

Soft Skills

Analytical SkillsProblem-Solving SkillsCommunication SkillsStakeholder ManagementCollaboration Skills

Tools & Technologies

ZscalerPalo Alto NetworksCloudflareF5SIEMSOARSecurity Analytics SolutionsVPNZTNASASE

Certifications & Qualifications

CISSPCCSPPCNSECCNP Security

Industry Keywords

CybersecurityNetwork SecurityFinancial ServicesRegulated IndustriesEmerging Threats

Tech Stack

Tools & technologies

CloudCyber SecurityFirewalls

About the role

Key responsibilities & impact

Define and drive the enterprise perimeter security strategy, architecture, and roadmap
Lead evaluation, implementation, and continuous improvement of perimeter security controls and technologies
Partner with Network Engineering, Infrastructure, Cloud, and Application teams to design and deploy secure network and internet-facing architectures
Collaborate with the Cyber Defense Center to enhance detection, investigation, threat hunting, and response capabilities for network and perimeter-based attacks
Lead initiatives involving next-generation firewalls, web application firewalls, DDoS protection, secure web gateways, remote access security, API protection, and Zero Trust technologies
Integrate perimeter security platforms with SIEM, SOAR, threat intelligence, and security analytics solutions
Develop security standards, architecture patterns, and implementation guidance for perimeter security technologies
Lead proof-of-concepts, product evaluations, and vendor assessments for network and perimeter security solutions
Track and report metrics related to threat prevention, attack surface reduction, control effectiveness, and risk reduction
Serve as a subject matter expert for perimeter security and defensive engineering initiatives

Requirements

What you’ll need

Bachelor's degree in Computer Science, Information Security, Engineering, or a related field, or equivalent practical experience
8+ years of experience in cybersecurity, network security, security engineering, or security architecture
5+ years of hands-on experience designing and implementing perimeter security technologies and controls
Experience with perimeter security technologies such as Zscaler, Palo Alto Networks, Cloudflare, F5, or similar platforms
Strong understanding of network security, perimeter defense, segmentation, secure access, and Zero Trust architectures
Experience securing internet-facing applications, APIs, and remote access services
Familiarity with WAF, DDoS protection, ZTNA, SSE, SASE, VPN, and network access controls
Experience integrating security platforms with SIEM, SOAR, and threat intelligence solutions
Strong analytical, troubleshooting, automation, and problem-solving skills
Excellent communication and stakeholder management skills
Experience developing security strategies, roadmaps, and architecture standards
Experience assessing emerging threats and translating risks into security controls and engineering priorities
Familiarity with cloud and hybrid network security architectures
Strong collaboration skills and ability to work across Cyber Security, Infrastructure, Cloud, and Engineering organizations
Ability to collaborate effectively with global teams across multiple time zones
Standard business hours availability with flexibility to support critical security incidents and initiatives when required
Experience working in financial services or other regulated industries preferred
Relevant certifications such as CISSP, CCSP, PCNSE, CCNP Security, or equivalent preferred

Benefits

Comp & perks

Retirement savings plan (401K) with company match
Insurance coverage including basic life, medical, dental, vision, long-term disability, and optional additional coverages
Paid time off including vacation, sick leave, short-term disability, and family care responsibilities
Employee Assistance Program
Incentive compensation including eligibility for annual performance-based awards
Tax-advantaged savings plans
Inclusive development opportunities
Flexible work-life support
Paid volunteer days
Employee networks