Sr. Associate, Threat and Vulnerability
Core
Identify and assess cyber threats, vulnerabilities, and exposures to prioritize remediation and reduce cyber risk for Northern Trust's business operations and technology platforms.
Role type
Senior IC threat and vulnerability analyst
Builds
Prioritized vulnerability remediation plans and exposure reduction programs
Domain
Financial services cybersecurity
Required skills
Vulnerability scanning analysis, CVE assessment, CVSS scoring, threat intelligence analysis, attack path identification, cloud security principles, vulnerability management platforms, remediation tracking, risk prioritization
Preferred skills
Experience with Zafran, Qualys, Microsoft Defender Vulnerability Management, Azure, AWS, Google Cloud, understanding of adversary TTPs
Technologies
Zafran, Qualys, Microsoft Defender Vulnerability Management, Azure, AWS, Google Cloud
Responsibilities
Analyze vulnerability scanning results across infrastructure, cloud, endpoints, applications, and containers; Assess new vulnerabilities and security advisories to determine organizational exposure; Prioritize remediation using CVSS, exploitability, threat intelligence, and business criticality; Identify and assess attack paths and security weaknesses across the enterprise; Monitor and assess emerging cyber threats and adversary activity; Collaborate with SOC, Threat Intelligence, and Infrastructure teams to support remediation efforts.
