Vulnerability Management Platform Engineer

Northern Trust • Chicago, IL

4d

About The Position

The Vulnerability Management Engineer supports, maintains, and enhances enterprise vulnerability management, security configuration compliance, cloud security, and exposure management technologies. This hands-on role focuses on security platform support, technical troubleshooting, automation, integrations, and continuous improvement. The engineer collaborates with the Vulnerability Management Engineering team to maintain reliable security platforms, improve processes, and support new security capabilities.

The position supports technologies including Qualys, Wiz, and equivalent platforms; vulnerability scanning infrastructure; cloud and container security capabilities; and integrations with asset management and IT service management workflows. It also contributes to automation, platform upgrades, testing, migrations, documentation, and evaluation of AI-driven workflow improvements.

Northern Trust describes a flexible and collaborative work culture, with opportunities for movement within the organization and a commitment to an inclusive workplace and community service. Applicants must be authorized to work in the United States without employment-based visa sponsorship.

Requirements

• At least 3 years of relevant experience, or equivalent practical experience, in vulnerability management, cybersecurity engineering, infrastructure security, cloud security, or a related technical discipline.
• Hands-on experience supporting enterprise vulnerability management or security assessment platforms, preferably Qualys or equivalent technologies.
• Experience troubleshooting vulnerability scanners, agents, authentication, connectivity, and security platform issues.
• Working knowledge of Windows, Linux, networking, and Microsoft Azure or equivalent cloud environments.
• Understanding of vulnerability scanning, security assessments, and security configuration compliance.
• Strong analytical, troubleshooting, and problem-solving skills, with the ability to learn and adapt to new security technologies.
• Ability to work independently on routine technical issues and collaborate effectively with engineering teams.
• Authorization to work in the U.S. without employment-based visa sponsorship now or in the future.

Nice To Haves

• Experience with Qualys Vulnerability Management and Policy Compliance.
• Familiarity with Wiz, Microsoft Azure security, and cloud configuration assessments.
• Basic experience with Python scripting, REST APIs, JSON, or security automation, and willingness to develop additional skills.
• Familiarity with Kubernetes, containers, and container security technologies.
• Understanding of Attack Surface Management, exposure management, and security integrations.
• Exposure to AI-driven automation and security workflow technologies.
• Experience supporting enterprise security platforms in large environments.

Responsibilities

• Support, configure, maintain, and troubleshoot enterprise vulnerability management and security platforms, including Qualys, Wiz, and equivalent technologies.
• Support vulnerability scanning infrastructure, including scanners, agents, authentication, scan configurations, performance, and asset coverage.
• Support Qualys Vulnerability Management and Policy Compliance, including security assessments, compliance policies, configuration controls, and reporting.
• Support cloud security and vulnerability management capabilities within Microsoft Azure and other enterprise environments.
• Assist with Kubernetes and container security, including vulnerability scanning, image assessments, and platform integrations.
• Assist in developing Python scripts, API integrations, and automation to improve platform efficiency and reduce manual processes.
• Support integrations between security platforms, asset management systems, and IT service management workflows.
• Monitor and troubleshoot scanning failures, data ingestion, platform connectivity, integration issues, and data-quality gaps.
• Support Attack Surface Management and exposure management capabilities, including asset discovery, external exposure, and security data enrichment.
• Participate in evaluating AI-driven automation and security workflow improvements.
• Assist with platform upgrades, testing, migrations, and implementation of new security capabilities.
• Collaborate with the VM Engineering team to identify opportunities for automation, platform optimization, and continuous improvement.
• Maintain technical documentation, platform configurations, support procedures, and engineering runbooks.

Benefits

• Retirement benefits, including 401(k) and pension.
• Health and welfare benefits, including medical, dental, vision, spending accounts, and disability coverage.
• Paid time off.
• Parental and caregiver leave.
• Life and accident insurance.
• Other voluntary and well-being benefits.
• Discretionary bonus program that may include an equity component.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed