Sr Lead, Cyber Sec Eng
185 Northern Operating Sols Pvt Ltd
Get a reply from this employer
Your resume and cover letter, tailored to exactly what they’re hiring for.
Job summary
Northern Trust's Pune office is seeking a senior security engineer to own vulnerability management, cloud security, and automation across Qualys, Wiz, Aqua, Zafran, and ServiceNow ecosystems.
You will design integrations, lead evaluations, and maintain runbooks while partnering with VM Ops to improve platform health and security posture. This role expects 12–15 years in security engineering and a strong DevSecOps mindset.
Qualifications
- Strong background in Security Engineering, Vulnerability Management, Cloud Security, Infrastructure Engineering, or DevSecOps.
- Hands-on engineering experience with Qualys and experience with Zafran, Wiz, Aqua Security, ASM, or comparable security platforms.
- Strong Python scripting and automation experience.
- Strong experience with REST APIs, JSON, authentication, and system-to-system integrations.
- Experience with Kubernetes, containers, registries, Linux, Windows, networking, and cloud infrastructure.
- Experience with Policy Compliance and configuration-security technologies.
- Experience engineering ServiceNow/CMDB integrations and workflows.
- Understanding of ASM, CTEM, CSPM/CNAPP, EDR, IAM, WAF, threat intelligence, and compensating security controls.
- Strong troubleshooting and problem-solving skills in complex enterprise environments.
- Acts as a resource for colleagues with less experience; May lead small projects with manageable risks and resource requirements
- Maintain KPI/KRI of team and provide regularly KPI/KRI report to VM Management on coverage.
Responsibilities
- Engineer, configure, administer, upgrade, and optimize Qualys, Zafran, Wiz, Aqua Security, ASM, and related VM technologies.
- Own engineering and technical health of Qualys scanning infrastructure, including scanners, agents, authentication, scan profiles, schedules, capacity, performance, and coverage.
- Engineer Qualys Policy Compliance, including policies, profiles, controls, authentication, configuration assessments, and integrations.
- Engineer and support Wiz cloud vulnerability, cloud posture, configuration compliance, and exposure-management capabilities.
- Engineer and support Aqua Security and Kubernetes/container security, including clusters, registries, images, workloads, scanning, and integrations.
- Develop Python scripts, API integrations, and automation to eliminate manual activities and improve VM scalability.
- Design and maintain REST API integrations across Qualys, Wiz, Aqua, Zafran, ServiceNow/CMDB, cloud platforms, and other security technologies.
- Engineer ServiceNow integrations and workflows for automated vulnerability creation, enrichment, assignment, synchronization, exception handling, validation, and closure.
- Leverage Zafran AI agents and AI capabilities to identify new automation opportunities and translate those opportunities into integrations and ServiceNow workflows.
- Engineer Zafran integrations that combine vulnerability, threat intelligence, asset criticality, internet exposure, attack-path, and security-control data.
- Identify opportunities to integrate compensating-control telemetry from EDR, endpoint protection, WAF, network security, IAM, cloud security, and other defensive technologies into Zafran.
- Engineer and enhance Attack Surface Management and CTEM capabilities, including external asset discovery, attribution, exposure identification, and integration with Zafran.
- Troubleshoot complex scanner, API, authentication, networking, ingestion, integration, enrichment, and platform issues.
- Develop monitoring for platform health, scanner utilization, data ingestion, API/integration performance, asset coverage, and data completeness.
- Partner with VM Operations to understand technical challenges and develop engineering or automation solutions.
- Lead technical evaluations, POCs, upgrades, migrations, and implementation of new VM/security capabilities.
- Maintain architecture diagrams, technical standards, integration documentation, engineering procedures, and platform runbooks.
Skills
Tools
Job description
As a global leader in innovative wealth management, asset servicing, asset management and banking services, Northern Trust (Nasdaq: NTRS) is proud to guide the world’s most successful individuals, families, corporations and institutions. Since 1889, we have aligned our efforts with our three guiding Principles That Endure: Service, Expertise, and Integrity. Together, they reflect the three cornerstones of business conduct which we strive to instill in our employees, whom we call partners, and to provide to our clients and the communities we serve worldwide. With more than 135 years of financial experience and over 24,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service.
- Engineer, configure, administer, upgrade, and optimize Qualys, Zafran, Wiz, Aqua Security, ASM, and related VM technologies.
- Own engineering and technical health of Qualys scanning infrastructure, including scanners, agents, authentication, scan profiles, schedules, capacity, performance, and coverage.
- Engineer Qualys Policy Compliance, including policies, profiles, controls, authentication, configuration assessments, and integrations.
- Engineer and support Wiz cloud vulnerability, cloud posture, configuration compliance, and exposure-management capabilities.
- Engineer and support Aqua Security and Kubernetes/container security, including clusters, registries, images, workloads, scanning, and integrations.
- Develop Python scripts, API integrations, and automation to eliminate manual activities and improve VM scalability.
- Design and maintain REST API integrations across Qualys, Wiz, Aqua, Zafran, ServiceNow/CMDB, cloud platforms, and other security technologies.
- Engineer ServiceNow integrations and workflows for automated vulnerability creation, enrichment, assignment, synchronization, exception handling, validation, and closure.
- Leverage Zafran AI agents and AI capabilities to identify new automation opportunities and translate those opportunities into integrations and ServiceNow workflows.
- Engineer Zafran integrations that combine vulnerability, threat intelligence, asset criticality, internet exposure, attack-path, and security-control data.
- Identify opportunities to integrate compensating-control telemetry from EDR, endpoint protection, WAF, network security, IAM, cloud security, and other defensive technologies into Zafran.
- Engineer and enhance Attack Surface Management and CTEM capabilities, including external asset discovery, attribution, exposure identification, and integration with Zafran.
- Troubleshoot complex scanner, API, authentication, networking, ingestion, integration, enrichment, and platform issues.
- Develop monitoring for platform health, scanner utilization, data ingestion, API/integration performance, asset coverage, and data completeness.
- Partner with VM Operations to understand technical challenges and develop engineering or automation solutions.
- Lead technical evaluations, POCs, upgrades, migrations, and implementation of new VM/security capabilities.
- Maintain architecture diagrams, technical standards, integration documentation, engineering procedures, and platform runbooks.
undefined undefined undefined undefined
- Strong background in Security Engineering, Vulnerability Management Engineering, Cloud Security, Infrastructure Engineering, or DevSecOps.
- Hands‑on engineering experience with Qualys and experience with Zafran, Wiz, Aqua Security, ASM, or comparable security platforms.
- Strong Python scripting and automation experience.
- Strong experience with REST APIs, JSON, authentication, and system-to-system integrations.
- Experience with Kubernetes, containers, registries, Linux, Windows, networking, and cloud infrastructure.
- Experience with Policy Compliance and configuration‑security technologies.
- Experience engineering ServiceNow/CMDB integrations and workflows.
- Understanding of ASM, CTEM, CSPM/CNAPP, EDR, IAM, WAF, threat intelligence, and compensating security controls.
- Strong troubleshooting and problem‑solving skills in complex enterprise environments.
- Acts as a resource for colleagues with less experience;
- May lead small projects with manageable risks and resource requirements
- Maintain KPI/KRI of team and provide regularly KPI/KRI report to VM Management on coverage.
- 12‑15 years of relevant experience
- Any infosec certifications or related (desired, not a compulsion)
As a Northern Trust partner, you will be part of a flexible and collaborative work culture, which has a strong history of financial strength and stability. Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to an inclusive workplace and assisting the communities we serve. Philanthropy is deeply rooted in Northern Trust’s history and is an essential element of our culture. Employees around the world give their time and talent to work for the greater good of their communities.
Northern Trust is committed to working with and providing adjustments to individuals with health conditions and disabilities. If you need a reasonable accommodation for any part of the employment process, please email our HR Service Center at MyHRHelp@ntrs.com, or alternatively you can discuss your individual requirements with the recruiter you are working with.
The Northern Trust Pune office, established in 2016, is now home to over 3,000 employees. The office handles various functions, including Operations for Asset Servicing and Wealth Management, as well as delivering critical technology solutions that support business operations across the globe. Our Pune team takes our commitment to service to heart. In 2024, they volunteered more than 10,000+ hours into the communities where they live and work. Learn more.
Candidate Privacy Notice California Applicant Privacy Notice Pay Transparency Nondiscrimination Provision (U.S) Transparency in Coverage Disclosure – North America Northern Trust is committed to working with and providing reasonable accommodations to individuals with disabilities.
It is the policy and practice of Northern Trust to provide equal employment opportunities to all employees and applicants. Northern Trust does not discriminate on the basis of race, colour, religion or belief, nationality, ethnic or national origin, sex, marital status, sexual orientation, disability or age. All employment decisions will be made in a non‑discriminatory manner in accordance with our obligations under the law and codes of practice. This includes human resources’ decisions relating to recruitment, terms and conditions of employment, transfers, promotions and access to learning and development.
Northern Trust is an Equal Opportunity Employer. Hiring and other employment decisions at Northern Trust are made without regard to race, colour, religion, sex, ancestry, national origin, ethnic origin, age, disability, citizenship, veteran status, sexual orientation, record of offences, marital status, family status, or any other characteristic protected by federal, provincial, or local law, regulation, or ordinance.
It is the policy and practice of Northern Trust to provide equal employment opportunities to all employees and applicants. Northern Trust does not discriminate on the basis of race, colour, religion or belief, nationality, ethnic or national origin, sex, marital status, sexual orientation, disability or age. All employment decisions will be made in a non‑discriminatory manner in accordance with our obligations under the law and codes of practice. This includes human resources’ decisions relating to recruitment, terms and conditions of employment, transfers, promotions and access to learning and development.
It is the policy of The Northern Trust Company to afford equal opportunity in all phases of employment without regard to an individual's age, race, color, religion, creed, gender, national origin, citizenship status, marital status, pregnancy, sexual orientation, gender identity, gender expression, genetic tests and information, physical or mental disability, protected veteran status or any other legally protected status. EEO Know Your Rights (U.S.)
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
