Sr Associate, Cyber Sec Eng

Overview

Northern Trust is looking for an Associate to join its Technology Development Center in Pune, India, as a Vulnerability Management Associate. The role provides day-to-day technical and platform support for enterprise Vulnerability Management technologies.

What you'll do

• Provide day-to-day technical and platform support for Qualys, Zafran, Wiz, Aqua Security, and associated integrations.
• Monitor platform health, scanning activity, integrations, data feeds, API jobs, asset coverage, and data completeness.
• Perform initial troubleshooting of scanner, agent, authentication, API, integration, and data-ingestion issues and escalate complex engineering issues to VM Engineers.
• Support Qualys scanner and agent operations, including scan status, authentication results, failed scans, coverage, and troubleshooting.
• Support Qualys Policy Compliance activities, including policy/profile maintenance, control mapping, authentication issues, configuration assessments, and reporting.
• Support Wiz cloud-security and configuration-compliance capabilities, including validation of findings, coverage, data feeds, and integrations.
• Support Aqua and Kubernetes/container security platforms, including monitoring scanning coverage, image/registry/cluster data, integrations, and platform issues.
• Monitor Zafran data ingestion and enrichment from connected security technologies and identify missing, stale, or inconsistent data.
• Validate that vulnerability, asset, threat, exposure, and compensating-control information is flowing correctly into Zafran.
• Support and test Zafran AI agent use cases and automation opportunities identified by VM Engineering.
• Assist VM Engineers with testing and validation of Python/API automation and ServiceNow workflow changes.
• Monitor ServiceNow integrations to ensure vulnerability records, assignments, enrichment, status updates, and closure information are flowing correctly between systems.
• Investigate integration failures, incorrect assignments, missing enrichment, duplicate records, asset-matching issues, and other data-quality problems.
• Support Attack Surface Management by validating discovered assets, investigating ownership and attribution data, and ensuring ASM information flows appropriately into downstream VM platforms.
• Perform UAT/testing and validation for platform upgrades, configuration changes, integrations, new automation, and new security capabilities.
• Assist VM Engineers with POCs, implementations, platform migrations, and integration testing.
• Produce platform-support reporting covering scanner health, coverage, integration status, failed jobs, data quality, enrichment, and other engineering metrics.
• Maintain platform inventories, configurations, support documentation, knowledge articles, procedures, and runbooks.
• Work closely with VM Engineering to identify recurring support issues that should be permanently resolved through engineering or automation.
• Work with VM Operations when platform or data issues affect their remediation processes, while leaving vulnerability remediation ownership with the existing VM Operations team.

What you'll need

• Experience supporting Vulnerability Management, Security Engineering, Security Platforms, or Cybersecurity Operations technologies.
• Working knowledge of Qualys, Zafran, Wiz, Aqua Security, ServiceNow, ASM, or comparable technologies.
• Understanding of vulnerability scanning, authenticated scanning, agents, asset inventory, and Policy Compliance/configuration assessment.
• Familiarity with cloud, Kubernetes, containers, Linux, Windows, networking, and enterprise infrastructure.
• Basic knowledge of REST APIs, JSON, scripting, and automation concepts.
• Ability to troubleshoot data feeds, integrations, authentication, scanning, coverage, and platform issues.
• Understanding of ServiceNow/CMDB integrations and vulnerability workflows.
• Strong analytical skills with the ability to investigate large datasets and identify coverage, enrichment, integration, and data-quality issues.
• Ability to work closely with engineers and learn complex enterprise security technologies.

Nice to have

• Python experience.
• Experience supporting security technologies within a large enterprise environment.
• 5-8 years of relevant experience.
• Any infosec certifications or related (desired, not a compulsion).

Details

• Location: Pune, India (Technology Development Center).