Lead, Cyber Security Engineer
Northern Trust3 months ago
Responsibilities
- Lead implementation and optimization of Zscaler DLP, Microsoft Purview DLP, CASB, Endpoint DLP, and data protection controls.
- Install, configure, upgrade, migrate, administer, and manage policies for Broadcom Layer7 API Gateway across development, UAT, and production environments.
- Design and support high-availability architectures involving clustering, replication, failover, disaster recovery, and business continuity.
- Design, deploy, and manage API security controls, gateway policies, and integration solutions.
- Troubleshoot gateway, networking, database, security, and integration issues and perform root cause analysis.
- Perform health checks, upgrade assessments, deployment validation, and operational readiness reviews.
- Monitor security events, investigate incidents, support threat detection and response, and provide L3 production support.
- Integrate security platforms with SIEM solutions and drive automation and DevOps improvements.
- Collaborate with infrastructure, network, database, cloud, and security teams.
- Create runbooks, technical documentation, upgrade procedures, and troubleshooting guides.
- Lead cybersecurity initiatives, mentor engineers, provide technical guidance, and influence security architecture and technology roadmaps.
Requirements
- Bachelor's degree or equivalent experience.
- 7+ years of experience in cybersecurity, data protection, encryption, API security, or Layer7 API Gateway work.
- Experience with Zscaler DLP, Microsoft Purview, Defender Suite, CASB, Endpoint DLP, and Broadcom Layer7 API Gateway.
- Experience with high availability, clustering, replication, disaster recovery, business continuity, Linux/Unix administration, and MySQL administration.
- Knowledge of network security, SSL/TLS, DNS, firewall connectivity, networking, threat detection, incident response, root cause analysis, and production support.
- Experience with Azure security services, SIEM platforms, automation, scripting, and DevOps practices.
- Preferred experience with Kubernetes, containerized deployments, Helm charts, YAML configuration, logging and diagnostic tools, and enterprise API management platforms.
- Cybersecurity certifications such as CISSP, CISM, CISA, GIAC/SANS, or cloud security certifications are preferred.
- Experience working in regulated environments and communicating with cross-functional stakeholders and leadership.
Benefits
- Comprehensive benefits package including 401(k) and pension, medical, dental, vision, spending accounts, disability coverage, paid time off, parental and caregiver leave, life and accident insurance, and voluntary and well-being benefits.
- Discretionary bonus program that may include an equity component.
- Flexible and collaborative work culture with accessible senior leaders, internal mobility opportunities, and an inclusive workplace.
- Applicants must be authorized to work in the United States without current or future employment-based visa sponsorship.
Tech Stack
Categories
About Northern Trust
Northern Trust is a financial services company that provides asset servicing (custody and fund administration), asset management, wealth management, and banking/treasury services to institutions, corporations, and affluent families. Its business model centers on fees for assets under custody/administration and management, plus banking services. Founded in 1889 and headquartered in Chicago, it is publicly traded on Nasdaq (NTRS) and serves clients across the Americas, EMEA, and APAC.