Lead Cybersecurity Engineer: API & Data Protection

Socket.dev; Chicago (IL); On-site; USD 140,000 - 190,000; Full time

Job summary

Northern Trust is seeking a Lead Cyber Security Engineer to design, implement, upgrade, administer, and support enterprise Data Protection, API Security, and gateway solutions. You will drive cybersecurity initiatives, provide L3 production support, and collaborate with business and technology teams to deliver secure, scalable, and highly available services.

The role requires 7+ years in cybersecurity with a strong focus on data protection and API security, plus relevant certifications.

Qualifications

• Bachelor's degree or equivalent experience in a related field.
• 7+ years of Cyber Security, Data Protection, Encryption, API Security, or Layer7 API Gateway experience.
• Certifications such as CISSP/CISM/CISA/GIAC/SANS or cloud security preferred.

Responsibilities

• Lead implementation and optimization of data protection controls (Zscaler DLP, Purview DLP, CASB, Endpoint DLP).
• Administer Broadcom Layer7 API Gateway across DEV/UAT/PROD environments.
• Design high-availability architectures including clustering, replication, and DR.
• Develop API security controls, gateway policies, and integration solutions.
• Troubleshoot security, network, and DB issues; perform root-cause analysis.
• Produce runbooks, docs, and upgrade procedures; mentor engineers.

Skills

Cybersecurity

Data Protection

API Security

Threat Detection

Incident Response

DevOps Practices

Education

Bachelor's degree or equivalent experience

CISSP, CISM, CISA, GIAC/SANS or cloud security certifications preferred

Tools

Zscaler DLP

Microsoft Purview DLP

Broadcom Layer7 API Gateway

CASB

Endpoint DLP

Azure Security Services

SIEM

CI/CD

Job description

Northern Trust is seeking a Lead Cyber Security Engineer to design, implement, upgrade, administer, and support enterprise Data Protection, API Security, and gateway solutions. You will drive cybersecurity initiatives, provide L3 production support, and collaborate with business and technology teams to deliver secure, scalable, and highly available services.

The role requires 7+ years in cybersecurity with a strong focus on data protection and API security, plus relevant certifications.