Vulnerability Management Platform Engineer

About Northern Trust As a global leader in innovative wealth management, asset servicing, asset management and banking services, Northern Trust (Nasdaq: NTRS) is proud to guide the world’s most successful individuals, families, corporations and institutions. Since 1889, we have aligned our efforts with our three guiding Principles That Endure: Service, Expertise, and Integrity. Together, they reflect the three cornerstones of business conduct which we strive to instill in our employees, whom we call partners, and to provide to our clients and the communities we serve worldwide. With more than 135 years of financial experience and over 24,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service.

Summary   The Vulnerability Management Engineer is responsible for supporting, maintaining, and enhancing enterprise vulnerability management, security configuration compliance, cloud security, and exposure management technologies.   This hands-on role focuses on security platform support, technical troubleshooting, automation, integrations, and continuous improvement. The engineer will collaborate closely with the Vulnerability Management Engineering team to maintain reliable security platforms, improve processes, and support new security capabilities.

Support, configure, maintain, and troubleshoot enterprise vulnerability management and security platforms, including Qualys, Wiz, and equivalent technologies. Support vulnerability scanning infrastructure, including scanners, agents, authentication, scan configurations, performance, and asset coverage. Support Qualys Vulnerability Management and Policy Compliance, including security assessments, compliance policies, configuration controls, and reporting. Support cloud security and vulnerability management capabilities within Microsoft Azure and other enterprise environments. Assist with Kubernetes and container security, including vulnerability scanning, image assessments, and platform integrations. Assist in developing Python scripts, API integrations, and automation to improve platform efficiency and reduce manual processes. Support integrations between security platforms, asset management systems, and IT service management workflows. Monitor and troubleshoot scanning failures, data ingestion, platform connectivity, integration issues, and data-quality gaps. Support Attack Surface Management and exposure management capabilities, including asset discovery, external exposure, and security data enrichment. Participate in evaluating AI-driven automation and security workflow improvements. Assist with platform upgrades, testing, migrations, and implementation of new security capabilities. Collaborate with the VM Engineering team to identify opportunities for automation, platform optimization, and continuous improvement. Maintain technical documentation, platform configurations, support procedures, and engineering runbooks.

3+ years of relevant experience or equivalent practical experience in vulnerability management, cybersecurity engineering, infrastructure security, cloud security, or a related technical discipline. Hands-on experience supporting enterprise vulnerability management or security assessment platforms, preferably Qualys or equivalent technologies. Experience troubleshooting vulnerability scanners, agents, authentication, connectivity, and security platform issues. Working knowledge of Windows, Linux, networking, and Microsoft Azure or equivalent cloud environments. Understanding of vulnerability scanning, security assessments, and security configuration compliance. Strong analytical, troubleshooting, and problem-solving skills, with the ability to learn and adapt to new security technologies. Ability to work independently on routine technical issues and collaborate effectively with engineering teams.

Experience with