Vulnerability Management Platform Engineer

ntrs; Chicago (IL); On-site; USD 110,000 - 160,000; Full time

Job summary

Northern Trust in Chicago seeks a Vulnerability Management Engineer to support, maintain, and enhance enterprise vulnerability management, security configuration compliance, cloud security, and exposure management technologies.

In this hands-on role you will troubleshoot platforms, build automation with Python and REST APIs, integrate security tools, and collaborate with the VM Engineering team to improve processes and expand capabilities.

Qualifications

• 3+ years of experience in vulnerability management or security engineering.
• Hands-on experience with vulnerability scanners and security platforms.
• Working knowledge of Windows, Linux, networks and Azure or similar clouds.
• Understanding of vulnerability assessments and security configuration compliance.
• Strong analytical and problem‑solving skills, able to learn new technologies.

Responsibilities

• Support, configure, maintain, and troubleshoot vulnerability management platforms (Qualys, Wiz).
• Manage vulnerability scanning infrastructure, agents, authentication, and coverage.
• Support policy compliance, assessments, controls, and reporting.
• Assist cloud security capabilities in Azure and other environments.
• Help with Kubernetes/container security, image assessments, and integrations.
• Develop Python scripts and API integrations to automate workflows.
• Collaborate to integrate security platforms with asset management and ITSM.
• Monitor scan failures, data ingestion, and data quality gaps.
• Contribute to automation and continuous improvement initiatives.

Skills

Vulnerability management

Security engineering

Cloud security

Automation scripting

Troubleshooting

Tools

Qualys

Wiz

Azure

Kubernetes

REST APIs

Job description

About Northern Trust

As a global leader in innovative wealth management, asset servicing, asset management and banking services, Northern Trust (Nasdaq: NTRS) is proud to guide the world's most successful individuals, families, corporations and institutions.

Since 1889, we have aligned our efforts with our three guiding Principles That Endure: Service, Expertise, and Integrity. Together, they reflect the three cornerstones of business conduct which we strive to instill in our employees, whom we call partners, and to provide to our clients and the communities we serve worldwide.

With more than 135 years of financial experience and over 24,000 partners, we serve the world's most sophisticated clients using leading technology and exceptional service.

Position Summary

The Vulnerability Management Engineer is responsible for supporting, maintaining, and enhancing enterprise vulnerability management, security configuration compliance, cloud security, and exposure management technologies.

This hands‑on role focuses on security platform support, technical troubleshooting, automation, integrations, and continuous improvement. The engineer will collaborate closely with the Vulnerability Management Engineering team to maintain reliable security platforms, improve processes, and support new security capabilities.

Key Responsibilities

• Support, configure, maintain, and troubleshoot enterprise vulnerability management and security platforms, including Qualys, Wiz, and equivalent technologies.
• Support vulnerability scanning infrastructure, including scanners, agents, authentication, scan configurations, performance, and asset coverage.
• Support Qualys Vulnerability Management and Policy Compliance, including security assessments, compliance policies, configuration controls, and reporting.
• Support cloud security and vulnerability management capabilities within Microsoft Azure and other enterprise environments.
• Assist with Kubernetes and container security, including vulnerability scanning, image assessments, and platform integrations.
• Assist in developing Python scripts, API integrations, and automation to improve platform efficiency and reduce manual processes.
• Support integrations between security platforms, asset management systems, and IT service management workflows.
• Monitor and troubleshoot scanning failures, data ingestion, platform connectivity, integration issues, and data‑quality gaps.
• Support Attack Surface Management and exposure management capabilities, including asset discovery, external exposure, and security data enrichment.
• Participate in evaluating AI‑driven automation and security workflow improvements.
• Assist with platform upgrades, testing, migrations, and implementation of new security capabilities.
• Collaborate with the VM Engineering team to identify opportunities for automation, platform optimization, and continuous improvement.
• Maintain technical documentation, platform configurations, support procedures, and engineering runbooks.

Required Qualifications

• 3+ years of relevant experience or equivalent practical experience in vulnerability management, cybersecurity engineering, infrastructure security, cloud security, or a related technical discipline.
• Hands‑on experience supporting enterprise vulnerability management or security assessment platforms, preferably Qualys or equivalent technologies.
• Experience troubleshooting vulnerability scanners, agents, authentication, connectivity, and security platform issues.
• Working knowledge of Windows, Linux, networking, and Microsoft Azure or equivalent cloud environments.
• Understanding of vulnerability scanning, security assessments, and security configuration compliance.
• Strong analytical, troubleshooting, and problem‑solving skills, with the ability to learn and adapt to new security technologies.
• Ability to work independently on routine technical issues and collaborate effectively with engineering teams.

Preferred Qualifications

• Experience with Qualys Vulnerability Management and Policy Compliance.
• Familiarity with Wiz, Microsoft Azure security, and cloud configuration assessments.
• Basic experience with Python scripting, REST APIs, JSON, or security automation, with a willingness to develop additional skills.
• Familiarity with Kubernetes, containers, and container security technologies.
• Understanding of Attack Surface Management, exposure management, and security integrations.
• Exposure to AI‑driven automation and security workflow technologies.
• Experience supporting enterprise security platforms in large environments.

Three Must-Have Qualifications

• 1. Vulnerability Management / Security Platform Experience
  3+ years of relevant experience or equivalent practical experience supporting vulnerability management or comparable enterprise security technologies, preferably Qualys.
• 2. Technical Troubleshooting & Platform Support
  Hands‑on experience configuring, maintaining, and troubleshooting vulnerability scanners, agents, authentication, connectivity