Vulnerability Management Engineer

About Northern Trust

As a global leader in innovative wealth management, asset servicing, asset management and banking services, Northern Trust (Nasdaq: NTRS) is proud to guide the world’s most successful individuals, families, corporations and institutions.

Since 1889, we have aligned our efforts with our three guiding Principles That Endure: Service, Expertise, and Integrity. Together, they reflect the three cornerstones of business conduct which we strive to instill in our employees, whom we call partners, and to provide to our clients and the communities we serve worldwide.

With more than 135 years of financial experience and over 24,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service.

The Vulnerability Management Engineer role is responsible for the engineering, architecture, automation, integration, optimization, and technical ownership of enterprise Vulnerability Management, Exposure Management, Configuration Compliance, Cloud Security, Container Security, and Attack Surface Management capabilities.

This is a hands-on engineering role supporting technologies including Qualys, Zafran Security, Wiz, Aqua Security, ServiceNow, and Attack Surface Management. The engineer will design and improve integrations and automation across the security ecosystem while ensuring VM platforms are scalable, reliable, and effectively support VM Operations and remediation teams.

Principal Responsibilities/Requirements:

• Engineer, configure, administer, upgrade, and optimize Qualys, Zafran, Wiz, Aqua Security, ASM, and related VM technologies.
• Own engineering and technical health of Qualys scanning infrastructure, including scanners, agents, authentication, scan profiles, schedules, capacity, performance, and coverage.
• Engineer Qualys Policy Compliance, including policies, profiles, controls, authentication, configuration assessments, and integrations.
• Engineer and support Wiz cloud vulnerability, cloud posture, configuration compliance, and exposure-management capabilities.
• Engineer and support Aqua Security and Kubernetes/container security, including clusters, registries, images, workloads, scanning, and integrations.
• Develop Python scripts, API integrations, and automation to eliminate manual activities and improve VM scalability.
• Design and maintain REST API integrations across Qualys, Wiz, Aqua, Zafran, ServiceNow/CMDB, cloud platforms, and other security technologies.
• Engineer ServiceNow integrations and workflows for automated vulnerability creation, enrichment, assignment, synchronization, exception handling, validation, and closure.
• Leverage Zafran AI agents and AI capabilities to identify new automation opportunities and translate those opportunities into integrations and ServiceNow workflows.
• Engineer Zafran integrations that combine vulnerability, threat intelligence, asset criticality, internet exposure, attack-path, and security-control data.
• Identify opportunities to integrate compensating-control telemetry from EDR, endpoint protection, WAF, network security, IAM, cloud security, and other defensive technologies into Zafran.
• Engineer and enhance Attack Surface Management and CTEM capabilities, including external asset discovery, attribution, exposure identification, and integration with Zafran.
• Troubleshoot complex scanner, API, authentication, networking, ingestion, integration, enrichment, and platform issues.
• Develop monitoring for platform health, scanner utilization, data ingestion, API/integration performance, asset coverage, and data completeness.
• Partner with VM Operations to understand technical challenges and develop engineering or automation solutions.
• Lead technical evaluations, POCs, upgrades, migrations, and implementation of new VM/security capabilities.
• Maintain architecture diagrams, technical standards, integration documentation, engineering procedures, and platform runbooks.
• undefined
• undefined
• undefined
• undefinedSkill / ExperienceMinimum:·       Strong background in Security Engineering, Vulnerability Management Engineering, Cloud Security, Infrastructure Engineering, or DevSecOps.·       Hands-on engineering experience with Qualys and experience with Zafran, Wiz, Aqua Security, ASM, or comparable security platforms.·       Strong Python scripting and automation experience.·       Strong experience with REST APIs, JSON, authentication, and system-to-system integrations.·       Experience with Kubernetes, containers, registries, Linux, Windows, networking, and cloud infrastructure.·       Experience with Policy Compliance and configuration-security technologies.·       Experience engineering ServiceNow/CMDB integrations and workflows.·       Understanding of ASM, CTEM, CSPM/CNAPP, EDR, IAM, WAF, threat intelligence, and compensating security controls.·       Strong troubleshooting and problem-solving skills in complex enterprise environments.·       Acts as a resource for colleagues with less experience;·       May lead small projects with manageable risks and resource requirements·       Maintain KPI/KRI of team and provide regularly KPI/KRI report to VM Management on coverage.  Preferred:·       12-15 years of relevant experience·       Any infosec certifications or related (desired, not a compulsion)

Working with Us

As a Northern Trust partner, you will be part of a flexible and collaborative work culture, which has a strong history of financial strength and stability. Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to an inclusive workplace and assisting the communities we serve.

Philanthropy is deeply rooted in Northern Trust’s history and is an essential element of our culture. Employees around the world give their time and talent to work for the greater good of their communities.

Reasonable Accommodation

Northern Trust is committed to working with and providing adjustments to individuals with health conditions and disabilities. If you need a reasonable accommodation for any part of the employment process, please email our HR Service Center at [email protected], or alternatively you can discuss your individual requirements with the recruiter you are working with.

About Our Pune Office

The Northern Trust Pune office, established in 2016, is now home to over 3,000 employees. The office handles various functions, including Operations for Asset Servicing and Wealth Management, as well as delivering critical technology solutions that support business operations across the globe.

Our Pune team takes our commitment to service to heart. In 2024, they volunteered more than 10,000+ hours into the communities where they live and work. Learn more.