Senior Lead, Security Engineering and Operations
Northern Trust2 days ago
Pune, IndiaStaff+
Responsibilities
- Design, engineer, coordinate, and operate enterprise security platforms across zero-trust, SASE/SSE, network security, vulnerability management, AI guardrails, and SaaS protection.
- Implement and support intrusion prevention, next-generation firewalls, vulnerability scanning and unified vulnerability management, secure web gateways, CASB, cloud access protection, SaaS monitoring, remote access, traffic inspection, browser isolation, and web threat prevention.
- Develop AI gateway controls governing how users and applications consume LLMs and AI services.
- Support platform health, upgrades, capacity, resilience, lifecycle management, and vendor escalations.
- Define metrics for coverage, control effectiveness, SLA adherence, tool health, control performance, and measurable risk reduction.
- Integrate security tools with ServiceNow and support SIEM and enterprise reporting workflows.
- Support PCI-DSS, SOX, GLBA, and OCC/FFIEC audits and regulatory examinations through traceable, repeatable control evidence.
- Author technical runbooks and executive-ready documentation, evaluate new capabilities and proofs of concept, and recommend tool rationalization opportunities.
Requirements
- Typically 12+ years of experience in information technology, cybersecurity, cloud, infrastructure, network security, or platform engineering with enterprise-scale security platform experience.
- Deep hands-on experience with at least one SSE/SASE platform, including ZTNA, secure web gateway policy, segmentation, connector architecture, and operating model design.
- Working knowledge of IPS and next-generation firewall platforms, including signature tuning.
- Strong knowledge of TCP/IP, routing, DNS, TLS/PKI, proxies, IPsec/GRE tunneling, and network segmentation.
- Experience with vulnerability management tooling and identity integrations using SAML/OIDC, Entra ID, and conditional access.
- Scripting and API skills with Python, PowerShell, and REST/JSON.
- Experience integrating security tools with ServiceNow, SIEM platforms, and enterprise reporting workflows.
- Experience in regulated environments involving control evidence, operational resilience, risk acceptance, issue management, and audit or regulatory response.
- Strong technical communication, documentation, troubleshooting, stakeholder collaboration, and technical decision-making skills.
- Preferred experience includes AI/LLM security controls, AI gateways, prompt-injection defenses, OWASP Top 10 for LLM Applications, MITRE ATLAS, ServiceNow Vulnerability Response or USEM, low-code automation, and Terraform/IaC.
Benefits
- Flexible and collaborative work culture with opportunities for internal movement and access to senior leaders.
- Inclusive workplace with community philanthropy and volunteering opportunities.
- Reasonable accommodations are available for individuals with health conditions and disabilities.
- Role is associated with Northern Trust's Pune office, which supports global technology and business operations.
About Northern Trust
Northern Trust is a financial services company that provides asset servicing (custody and fund administration), asset management, wealth management, and banking/treasury services to institutions, corporations, and affluent families. Its business model centers on fees for assets under custody/administration and management, plus banking services. Founded in 1889 and headquartered in Chicago, it is publicly traded on Nasdaq (NTRS) and serves clients across the Americas, EMEA, and APAC.