AppSec Jobs

State Street Security Team

Open security roles at State Street, and what we know about the team behind them.

financial services · 53000 employees · 3 open roles. Updated October 16, 2026.

Open roles (3)

State Street

Security Architect- MD

Security Intel
Chicago, Illinois, United Statesfinancial servicesPosted Date unknownVerified 3d ago

“Integrating cybersecurity into agile practices and DevSecOps strategies.”

StackDynamic Application Security Testing
View Job

State Street

Penetration Testing Engineer- VP

Security Intel
Berwyn, Pennsylvania, United Statesfinancial servicesPosted Date unknownVerified 4d ago

“Integrating cybersecurity into agile practices and DevSecOps strategies.”

StackDynamic Application Security Testing
View Job

State Street

Senior AI Security Automation Engineer, Vice President

Security Intel
County Kilkenny, Irelandfinancial servicesPosted Date unknownVerified 4d ago

“Integrating cybersecurity into agile practices and DevSecOps strategies.”

StackDynamic Application Security Testing
View Job

Security at State Street

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

How they approach application security

  • State Street's AppSec philosophy centers on integrating cybersecurity into agile practices and DevSecOps strategies.
  • The team emphasizes developer enablement over strict gatekeeping, focusing on 'influencing without authority' and partnering with the development community to triage and remediate vulnerabilities.
  • Their goal is to continuously improve security processes and tools to support organizational adoption of agile methodologies.

The team

  • State Street's Application Security function resides within the Cyber Security Architecture & Engineering team.
  • The overall information security program is led by Elizabeth (Liz) Joyce, Executive Vice President and Chief Information Security Officer (CISO).
  • As of April 2026, there are at least three active job postings for Application Security roles, including an Application Security Engineer and a Senior Security Testing Analyst (VP).
  • Common skill patterns across these roles include expertise in SAST, DAST, SCA, container security, and cloud platforms like Azure and AWS.

What they're working on

State Street is currently focused on building a comprehensive DevSecOps and AppSec Strategy. Key operational workflows include the automation of security processes within CI/CD pipelines and the implementation of a Secure Software Development Lifecycle (SSDLC). Vulnerability management involves threat-led penetration testing and partnering with engineering teams to operationalize security principles. There is no public evidence of a formal Security Champions program.