About Northern Trust

As a global leader in creative wealth management, asset servicing, asset management and banking services, Northern Trust (Nasdaq: NTRS) is proud to guide the world's most successful individuals, families, corporations and institutions.

Since 1889, we have aligned our efforts with our three guiding Principles That Endure: Service, Expertise, and Integrity. Together, they reflect the three cornerstones of business conduct which we strive to instill in our employees, whom we call partners, and to provide to our clients and the communities we serve worldwide.

With more than 135 years of financial experience and over 24,000 partners, we serve the world's most sophisticated clients using leading technology and exceptional service.

For more than a century, Northern Trust has worked hard building our legacy of outstanding service, expertise and integrity. From a Chicago-based bank founded in 1889, we now have more than 20 international locations and 18,500 employees globally. We serve the world's most-sophisticated clients - from sovereign wealth funds and the wealthiest individuals and families, to the most-successful hedge funds and corporate brands.

We burnished our reputation as a global leader delivering innovative investment management, asset and fund administration, fiduciary and banking solutions enabled by sophisticated, leading technology. And through it all, we continually laid a solid, forward-looking foundation on which future generations can continue growing and achieving greater.

Northern Trust is looking for an Associate to join its Technology Development Center in Pune, India.

Job Description AND Principal Responsibilities





The Vulnerability Management Associate is a technical support role within the Vulnerability Management function, providing day-to-day platform administration, technical analysis, data validation, integration monitoring, testing, reporting, and support for enterprise Vulnerability Management technologies.

This role works closely with VM Engineers to provide day-to-day technical support across the Vulnerability Management technology ecosystem, with a focus on platform monitoring, troubleshooting, data quality, integration support, testing, reporting, and continuous improvement.

The role will support technologies including Qualys, Zafran Security, Wiz, Aqua Security, ServiceNow integrations, Policy Compliance, and Attack Surface Management capabilities.

Principal Responsibilities/Requirements:

- Provide day-to-day technical and platform support for Qualys, Zafran, Wiz, Aqua Security, and associated integrations.
- Monitor platform health, scanning activity, integrations, data feeds, API jobs, asset coverage, and data completeness.
- Perform initial troubleshooting of scanner, agent, authentication, API, integration, and data-ingestion issues and escalate complex engineering issues to VM Engineers.
- Support Qualys scanner and agent operations, including scan status, authentication results, failed scans, coverage, and troubleshooting.
- Support Qualys Policy Compliance activities,



including policy/profile maintenance, control mapping, authentication issues, configuration assessments, and reporting.
- Support Wiz cloud-security and configuration-compliance capabilities, including validation of findings, coverage, data feeds, and integrations.
- Support Aqua and Kubernetes/container security platforms, including monitoring scanning coverage, image/registry/cluster data, integrations, and platform issues.
- Monitor Zafran data ingestion and enrichment from connected security technologies and identify missing, stale, or inconsistent data.
- Validate that vulnerability, asset, threat, exposure, and compensating-control information is flowing correctly into Zafran.
- Support and test Zafran AI agent use cases and automation opportunities identified by VM Engineering.
- Assist VM Engineers with testing and validation of Python/API automation and ServiceNow workflow changes.
- Monitor ServiceNow integrations to ensure vulnerability records, assignments, enrichment, status updates, and closure information are flowing correctly between systems.
- Investigate integration failures, incorrect assignments, missing enrichment, duplicate records, asset-matching issues, and other data-quality problems.
- Support Attack Surface Management by validating discovered assets, investigating ownership and attribution data, and ensuring ASM information flows appropriately into downstream VM platforms.
- Perform UAT/testing and validation for platform upgrades, configuration changes, integrations, new automation, and new security capabilities.
- Assist VM Engineers with POCs, implementations, platform migrations, and integration testing.
- Produce platf

📌 Sr Associate, Cyber Sec Eng (Pune)
🏢 Northern Trust
📍 Pune