Threat & Vulnerability Analyst for Enterprise Security

Northern Trust; Chicago (IL); On-site; USD 89,000 - 151,000; Full time

Job summary

Northern Trust is seeking a Threat & Vulnerability Analyst in Chicago to identify and assess cyber threats, vulnerabilities, and exposures across the organization's technology landscape.

You will translate vulnerability data into actionable remediation recommendations and partner with multiple teams to reduce cyber risk, including vulnerability management, security operations, and risk groups.

Qualifications

• Bachelor's degree in Cyber Security, Computer Science, Information Technology, or related discipline.
• 3-5 years of experience in cyber security, vulnerability management, threat intelligence, security operations, or related fields.
• Experience analyzing vulnerabilities and security risks within large enterprise environments.
• Understanding of cloud security principles across Azure, AWS, or Google Cloud.

Responsibilities

• Analyze vulnerability scanning results across infrastructure, cloud, endpoints, applications, and container environments.
• Prioritize remediation using CVSS, exploitability, threat intelligence, business criticality, and asset context.
• Identify attack paths and security weaknesses across the enterprise environment.
• Collaborate with SOC, Threat Intelligence, Penetration Testing, Infrastructure, Cloud Engineering, and Risk teams.

Skills

Cyber security

Vulnerability management

Threat intelligence

Security operations

Analytical thinking

Education

Bachelor's degree in Cyber Security, Computer Science, Information Technology, or related discipline

Tools

Zafran

Qualys

Microsoft Defender Vulnerability Management

Job description

Northern Trust is seeking a Threat & Vulnerability Analyst in Chicago to identify and assess cyber threats, vulnerabilities, and exposures across the organization's technology landscape.

You will translate vulnerability data into actionable remediation recommendations and partner with multiple teams to reduce cyber risk, including vulnerability management, security operations, and risk groups.