As a global leader in innovative wealth management asset servicing asset management and banking services Northern Trust (Nasdaq: NTRS) is proud to guide the worlds most successful individuals families corporations and institutions.
Since 1889 we have aligned our efforts with our three guiding Principles That Endure: Service Expertise and Integrity. Together they reflect the three cornerstones of business conduct which we strive to instill in our employees whom we call partners and to provide to our clients and the communities we serve worldwide.
With more than 135 years of financial experience and over 24000 partners we serve the worlds most sophisticated clients using leading technology and exceptional service.
For more than a century Northern Trust has worked hard building our legacy of outstanding service expertise and integrity. From a Chicago-based bank founded in 1889 we now have more than 20 international locations and 18500 employees globally. We serve the worlds most-sophisticated clients from sovereign wealth funds and the wealthiest individuals and families to the most-successful hedge funds and corporate brands.
We burnished our reputation as a global leader delivering innovative investment management asset and fund administration fiduciary and banking solutions enabled by sophisticated leading technology. And through it all we continually laid a solid forward-looking foundation on which future generations can continue growing and achieving greater.
Northern Trust is looking for an Associate to join its Technology Development Center in Pune India.
Job Description AND Principal Responsibilities
The Vulnerability Management Associate is a technical support role within the Vulnerability Management function providing day-to-day platform administration technical analysis data validation integration monitoring testing reporting and support for enterprise Vulnerability Management technologies.
This role works closely with VM Engineers to provide day-to-day technical support across the Vulnerability Management technology ecosystem with a focus on platform monitoring troubleshooting data quality integration support testing reporting and continuous improvement.
The role will support technologies including Qualys Zafran Security Wiz Aqua Security ServiceNow integrations Policy Compliance and Attack Surface Management capabilities.
Principal Responsibilities/Requirements:
- Provide day-to-day technical and platform support for Qualys Zafran Wiz Aqua Security and associated integrations.
- Monitor platform health scanning activity integrations data feeds API jobs asset coverage and data completeness.
- Perform initial troubleshooting of scanner agent authentication API integration and data-ingestion issues and escalate complex engineering issues to VM Engineers.
- Support Qualys scanner and agent operations including scan status authentication results failed scans coverage and troubleshooting.
- Support Qualys Policy Compliance activities including policy/profile maintenance control mapping authentication issues configuration assessments and reporting.
- Support Wiz cloud-security and configuration-compliance capabilities including validation of findings coverage data feeds and integrations.
- Support Aqua and Kubernetes/container security platforms including monitoring scanning coverage image/registry/cluster data integrations and platform issues.
- Monitor Zafran data ingestion and enrichment from connected security technologies and identify missing stale or inconsistent data.
- Validate that vulnerability asset threat exposure and compensating-control information is flowing correctly into Zafran.
- Support and test Zafran AI agent use cases and automation opportunities identified by VM Engineering.
- Assist VM Engineers with testing and validation of Python/API automation and ServiceNow workflow changes.
- Monitor ServiceNow integrations to ensure vulnerability records assignments enrichment status updates and closure information are flowing correctly between systems.
- Investigate integration failures incorrect assignments missing enrichment duplicate records asset-matching issues and other data-quality problems.
- Support Attack Surface Management by validating discovered assets investigating ownership and attribution data and ensuring ASM information flows appropriately into downstream VM platforms.
- Perform UAT/testing and validation for platform upgrades configuration changes integrations new automation and new security capabilities.
- Assist VM Engineers with POCs implementations platform migrations and integration testing.
- Produce platform-support reporting covering scanner health coverage integration status failed jobs data quality enrichment and other engineering metrics.
- Maintain platform inventories configurations support documentation knowledge articles procedures and runbooks.
- Work closely with VM Engineering to identify recurring support issues that should be permanently resolved through engineering or automation.
- Work with VM Operations when platform or data issues affect their remediation processes while leaving vulnerability remediation ownership with the existing VM Operations team.
Working knowledge of Qualys Zafran Wiz Aqua Security ServiceNow ASM or comparable technologies.
Understanding of vulnerability scanning authenticated scanning agents asset inventory and Policy Compliance/configuration assessment.
Familiarity with cloud Kubernetes containers Linux Windows networking and enterprise infrastructure.
Basic knowledge of REST APIs JSON scripting and automation concepts; Python experience is preferred.
Ability to troubleshoot data feeds integrations authentication scanning coverage and platform issues.
Understanding of ServiceNow/CMDB integrations and vulnerability workflows.
Solid analytical skills with the ability to investigate large datasets and identify coverage enrichment integration and data-quality issues.
Ability to work closely with engineers and learn complex enterprise security technologies.
Experience supporting security technologies within a large enterprise environment preferred.
Preferred:
5-8 years of relevant experience
Any infosec certifications or related (desired not a compulsion)
Working with Us
As a Northern Trust partner you will be part of a flexible and cooperative work culture which has a strong history of financial strength and stability. Movement within the organization is encouraged senior leaders are accessible and you can take pride in working for a company committed to an inclusive workplace and assisting the communities we serve.
Philanthropy is deeply rooted in Northern Trusts history and is an essential element of our culture. Employees around the world give their time and talent to work for the greater good of their communities.
Reasonable Accommodation
Northern Trust is committed to working with and providing adjustments to individuals with health conditions and disabilities. If you need a reasonable accommodation for any part of the employment process please email our HR Service Center at or alternatively you can discuss your individual requirements with the recruiter you are working with.
About Our Pune Office
The Northern Trust Pune office established in 2016 is now home to over 3000 employees. The office handles various functions including Operations for Asset Servicing and Wealth Management as well as delivering critical technology solutions that support business operations across the globe.
Our Pune team takes our commitment to service to 2024 they volunteered more than 10000 hours into the communities where they live and work. Learn more.
Required Experience:
Senior IC
📌 Sr Associate, Cyber Sec Eng (Pune)
🏢 Northern Trust
📍 Pune
Reply to this offer
Impress this employer describing Your skills and abilities, fill out the form below and leave Your personal touch in the presentation letter.