Senior Lead, Security Engineering and Operations
Northern Trust15 hours ago
Pune, IndiaStaff+
Responsibilities
- Design, engineer, coordinate, and operate enterprise security platforms across zero-trust, SASE/SSE, network security, vulnerability management, AI guardrails, and SaaS protection.
- Manage IPS across next-generation firewalls, vulnerability scanning and unified vulnerability management platforms, SASE/SSE, secure web gateways, CASB, cloud access protection, SaaS monitoring, remote access, traffic inspection, browser isolation, and web threat prevention.
- Implement AI gateway controls governing how users and applications consume LLMs and AI services.
- Support platform health, upgrades, capacity, resilience, lifecycle management, and vendor escalations.
- Define metrics for coverage, control effectiveness, SLA adherence, tool health, control performance, and measurable risk reduction.
- Integrate security platforms with ServiceNow, SIEM platforms, and enterprise reporting workflows.
- Support PCI-DSS, SOX, GLBA, OCC, and FFIEC audits and regulatory examinations.
- Author operational runbooks and executive-ready technical documentation.
- Evaluate new capabilities, proofs of concept, and tool rationalization opportunities based on risk reduction, operational fit, cost, and control outcomes.
- Partner with engineering, infrastructure, application, risk, operations, and audit stakeholders on security initiatives.
Requirements
- 12+ years of experience in information technology, cybersecurity, cloud, infrastructure, network security, or platform engineering.
- Hands-on experience supporting enterprise-scale security platforms and operating as an experienced technical contributor.
- Deep hands-on experience with at least one SSE/SASE platform, including ZTNA, secure web gateway policy, segmentation, connector architecture, and operating model design.
- Working knowledge of IPS and next-generation firewall platforms, including signature tuning.
- Strong networking fundamentals covering TCP/IP, routing, DNS, TLS/PKI, proxies, IPsec/GRE tunneling, and segmentation.
- Experience with vulnerability management tooling.
- Familiarity with SAML/OIDC, Entra ID, and conditional access.
- Scripting and API skills using Python, PowerShell, and REST/JSON.
- Experience integrating security tools with ServiceNow, SIEM platforms, and enterprise reporting workflows.
- Strong communication, documentation, audit-support, and cross-functional collaboration skills.
- Experience in regulated environments involving control evidence, operational resilience, risk acceptance, issue management, and audit or regulatory response.
- Preferred exposure to AI/LLM security controls, AI gateways, prompt-injection defenses, OWASP Top 10 for LLM Applications, MITRE ATLAS, ServiceNow Vulnerability Response or USEM, low-code automation, and Terraform/IaC.
Benefits
- Flexible and collaborative work culture.
- Accessible senior leadership and opportunities for internal movement.
- Inclusive workplace and community support initiatives.
- Reasonable accommodations are available during the employment process.
- Role is associated with Northern Trust’s Pune office.
About Northern Trust
Northern Trust is a financial services company that provides asset servicing (custody and fund administration), asset management, wealth management, and banking/treasury services to institutions, corporations, and affluent families. Its business model centers on fees for assets under custody/administration and management, plus banking services. Founded in 1889 and headquartered in Chicago, it is publicly traded on Nasdaq (NTRS) and serves clients across the Americas, EMEA, and APAC.