Senior Lead, Security Engineering and Operations
Northern Trust1 day ago
Base Salary
$115k - $195k/yr
Responsibilities
- Design, engineer, coordinate, and operate enterprise security platforms spanning zero-trust, SASE/SSE, network security, vulnerability and exposure management, AI guardrails, and SaaS protection.
- Deliver and operate IPS across next-generation firewalls, vulnerability scanning and unified vulnerability management platforms, enterprise SASE/SSE, secure web gateways, CASB, cloud access protection, SaaS application protection, secure remote access, traffic inspection, browser isolation, and web threat prevention.
- Implement AI gateway controls governing how users and applications consume LLMs and AI services.
- Support platform health, upgrades, capacity, resilience, lifecycle management, and vendor escalations.
- Define metrics for coverage, control effectiveness, SLA adherence, tool health, control performance, and measurable risk reduction.
- Support PCI-DSS, SOX, GLBA, and OCC/FFIEC audits and regulatory examinations with traceable, repeatable control evidence.
- Author operational runbooks and executive-ready technical documentation.
- Evaluate new capabilities, proofs of concept, and tool rationalization opportunities based on risk reduction, operational fit, cost, and control outcomes.
- Partner with engineering, infrastructure, application, risk, and audit stakeholders on cross-functional security initiatives.
Requirements
- Typically 12+ years of experience in information technology, cybersecurity, cloud, infrastructure, network security, or platform engineering, including hands-on enterprise-scale security platform experience.
- Deep hands-on experience with at least one SSE/SASE platform, including ZTNA, secure web gateway policy, segmentation, connector architecture, and operating model design.
- Working knowledge of IPS and next-generation firewall platforms, including signature tuning.
- Strong networking fundamentals covering TCP/IP, routing, DNS, TLS/PKI, proxies, IPsec/GRE tunneling, and segmentation.
- Experience with vulnerability management tooling.
- Familiarity with SAML/OIDC, Entra ID, and conditional access integrations.
- Scripting and API skills with Python, PowerShell, and REST/JSON.
- Experience integrating security tools with ServiceNow, SIEM platforms, and enterprise reporting workflows.
- Strong communication, technical documentation, audit support, and stakeholder collaboration skills.
- Experience in regulated environments involving control evidence, operational resilience, risk acceptance, issue management, and audit or regulatory response.
- Preferred exposure to AI/LLM security controls, AI gateways, prompt-injection defenses, OWASP Top 10 for LLM Applications, MITRE ATLAS, ServiceNow Vulnerability Response or USEM, low-code automation, or Terraform/IaC.
Benefits
- Comprehensive benefits package including 401(k) and pension, medical, dental, vision, spending accounts, disability coverage, paid time off, parental and caregiver leave, life and accident insurance, and other voluntary and well-being benefits.
- Discretionary bonus program that may include an equity component.
- Flexible and collaborative work culture with internal mobility opportunities, accessible senior leaders, and an inclusive workplace.
About Northern Trust
Northern Trust is a financial services company that provides asset servicing (custody and fund administration), asset management, wealth management, and banking/treasury services to institutions, corporations, and affluent families. Its business model centers on fees for assets under custody/administration and management, plus banking services. Founded in 1889 and headquartered in Chicago, it is publicly traded on Nasdaq (NTRS) and serves clients across the Americas, EMEA, and APAC.