Sr Associate, Cyber Sec Eng

VulnU; Pune District; In loco; INR 900.000 - 1.300.000; Tempo pieno

Descrizione del lavoro

Northern Trust is seeking an Associate to join its Technology Development Center in Pune, India. The role focuses on Vulnerability Management, platform administration, data validation, and integration monitoring within a large enterprise security environment.

You will support Qualys, Zafran, Wiz, Aqua Security, and ServiceNow integrations, with emphasis on data quality, analytics, and automation opportunities in a complex VM ecosystem.

Competenze

• Experience supporting Vulnerability Management or security platforms.
• Understanding of vulnerability scanning, asset inventory, and policy compliance.
• Familiarity with cloud, Kubernetes, containers, Linux, Windows, and networking.

Mansioni

• Provide day-to-day technical and platform support for VM technologies and integrations.
• Monitor platform health, scanning activity, data feeds, and API jobs; troubleshoot issues.
• Assist with UAT/testing, platform upgrades, and automation initiatives.

Conoscenze

Vulnerability Management

Security Platforms

Analytical skills

REST APIs

Strumenti

Qualys

Zafran

Wiz

Aqua Security

ServiceNow integrations

Descrizione del lavoro

Northern Trust is looking for an Associate to join its Technology Development Center in Pune, India.Job Description AND Principal Responsibilities The Vulnerability Management Associate is a technical support role within the Vulnerability Management function, providing day-to-day platform administration, technical analysis, data validation, integration monitoring, testing, reporting, and support for enterprise Vulnerability Management technologies.This role works closely with VM Engineers to provide day-to-day technical support across the Vulnerability Management technology ecosystem, with a focus on platform monitoring, troubleshooting, data quality, integration support, testing, reporting, and continuous improvement.The role will support technologies including Qualys, Zafran Security, Wiz, Aqua Security, ServiceNow integrations, Policy Compliance, and Attack Surface Management capabilities. Principal Responsibilities/Requirements: Provide day-to-day technical and platform support for Qualys, Zafran, Wiz, Aqua Security, and associated integrations.Monitor platform health, scanning activity, integrations, data feeds, API jobs, asset coverage, and data completeness.Perform initial troubleshooting of scanner, agent, authentication, API, integration, and data-ingestion issues and escalate complex engineering issues to VM Engineers.Support Qualys scanner and agent operations, including scan status, authentication results, failed scans, coverage, and troubleshooting.Support Qualys Policy Compliance activities, including policy/profile maintenance, control mapping, authentication issues, configuration assessments, and reporting.Support Wiz cloud-security and configuration-compliance capabilities, including validation of findings, coverage, data feeds, and integrations.Support Aqua and Kubernetes/container security platforms, including monitoring scanning coverage, image/registry/cluster data, integrations, and platform issues.Monitor Zafran data ingestion and enrichment from connected security technologies and identify missing, stale, or inconsistent data.Validate that vulnerability, asset, threat, exposure, and compensating-control information is flowing correctly into Zafran.Support and test Zafran AI agent use cases and automation opportunities identified by VM Engineering.Assist VM Engineers with testing and validation of Python/API automation and ServiceNow workflow changes.Monitor ServiceNow integrations to ensure vulnerability records, assignments, enrichment, status updates, and closure information are flowing correctly between systems.Investigate integration failures, incorrect assignments, missing enrichment, duplicate records, asset-matching issues, and other data-quality problems.Support Attack Surface Management by validating discovered assets, investigating ownership and attribution data, and ensuring ASM information flows appropriately into downstream VM platforms.Perform UAT/testing and validation for platform upgrades, configuration changes, integrations, new automation, and new security capabilities.Assist VM Engineers with POCs, implementations, platform migrations, and integration testing.Produce platform-support reporting covering scanner health, coverage, integration status, failed jobs, data quality, enrichment, and other engineering metrics.Maintain platform inventories, configurations, support documentation, knowledge articles, procedures, and runbooks.Work closely with VM Engineering to identify recurring support issues that should be permanently resolved through engineering or automation.Work with VM Operations when platform or data issues affect their remediation processes, while leaving vulnerability remediation ownership with the existing VM Operations team.Skill / ExperienceMinimum:· Experience supporting Vulnerability Management, Security Engineering, Security Platforms, or Cybersecurity Operations technologies.· Working knowledge of Qualys, Zafran, Wiz, Aqua Security, ServiceNow, ASM, or comparable technologies.· Understanding of vulnerability scanning, authenticated scanning, agents, asset inventory, and Policy Compliance/configuration assessment.· Familiarity with cloud, Kubernetes, containers, Linux, Windows, networking, and enterprise infrastructure.· Basic knowledge of REST APIs, JSON, scripting, and automation concepts; Python experience is preferred.· Ability to troubleshoot data feeds, integrations, authentication, scanning, coverage, and platform issues.· Understanding of ServiceNow/CMDB integrations and vulnerability workflows.· Strong analytical skills with the ability to investigate large datasets and identify coverage, enrichment, integration, and data-quality issues.· Ability to work closely with engineers and learn complex enterprise security technologies.· Experience supporting security technologies within a large enterprise environment preferred. Preferred:· 5-8 years of relevant experience· Any infosec certifications or related (desired, not a compulsion) Working with UsAs a Northern Trust partner, you will be part of a flexible and collaborative work culture, which has a strong history of financial strength and stability. Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to an inclusive workplace and assisting the communities we serve.Philanthropy is deeply rooted in Northern Trust’s history and is an essential element of our culture. Employees around the world give their time and talent to work for the greater good of their communities.Reasonable AccommodationNorthern Trust is committed to working with and providing adjustments to individuals with health conditions and disabilities. If you need a reasonable accommodation for any part of the employment process, please email our HR Service Center at MyHRHelp ntrs.com, or alternatively you can discuss your individual requirements with the recruiter you are working with.