Senior Lead, Security Engineering and Operations
Northern Trust1 day ago
Base Salary
$115k - $195k/yr
Responsibilities
- Design, engineer, coordinate, and operate enterprise security platforms across intrusion prevention, vulnerability management, SASE/SSE, secure web gateways, CASB, SaaS protection, remote access, browser isolation, and AI gateway controls.
- Support platform health, upgrades, capacity, resilience, lifecycle management, and vendor escalations.
- Define metrics for coverage, control effectiveness, SLA adherence, tool health, control performance, and measurable risk reduction.
- Support PCI-DSS, SOX, GLBA, OCC, and FFIEC audits and regulatory examinations with evidence-focused controls.
- Author operational runbooks and executive-ready technical documentation.
- Evaluate new capabilities, proofs of concept, and tool rationalization opportunities based on risk reduction, operational fit, cost, and control outcomes.
- Partner with engineering, infrastructure, application, risk, operations, and audit stakeholders on cross-functional security initiatives.
Requirements
- Typically 12+ years of experience in information technology, cybersecurity, cloud, infrastructure, network security, or platform engineering.
- Hands-on experience supporting enterprise-scale security platforms and operating as an experienced technical contributor.
- Deep hands-on experience with at least one SSE/SASE platform, including ZTNA, secure web gateway policy, segmentation, connector architecture, and operating model design.
- Working knowledge of IPS and next-generation firewall platforms, including signature tuning.
- Strong networking fundamentals covering TCP/IP, routing, DNS, TLS/PKI, proxies, IPsec/GRE tunneling, and segmentation.
- Experience with vulnerability management tooling, identity integration, SAML/OIDC, Entra ID, and conditional access.
- Scripting and API skills using Python, PowerShell, and REST/JSON.
- Experience integrating security tools with ServiceNow, SIEM platforms, and enterprise reporting workflows.
- Strong communication, documentation, audit-support, collaboration, and technical decision-making skills.
- Experience in regulated environments involving control evidence, operational resilience, risk acceptance, issue management, and audit or regulatory response.
- Preferred experience includes AI/LLM security controls, AI gateways, prompt-injection defenses, OWASP Top 10 for LLM Applications, MITRE ATLAS, ServiceNow Vulnerability Response or USEM, and low-code automation or Terraform/IaC.
Benefits
- Comprehensive benefits package including 401(k), pension, medical, dental, vision, spending accounts, disability coverage, paid time off, parental and caregiver leave, life and accident insurance, and voluntary and well-being benefits.
- Discretionary bonus program that may include an equity component.
- Flexible and collaborative work culture with internal mobility, accessible senior leaders, and an inclusive workplace.
- Reasonable accommodations are available during the employment process.
About Northern Trust
Northern Trust is a financial services company that provides asset servicing (custody and fund administration), asset management, wealth management, and banking/treasury services to institutions, corporations, and affluent families. Its business model centers on fees for assets under custody/administration and management, plus banking services. Founded in 1889 and headquartered in Chicago, it is publicly traded on Nasdaq (NTRS) and serves clients across the Americas, EMEA, and APAC.