Job offer

Lead, Cybersecurity Engineer

As a Lead Cybersecurity Engineer at Northern Trust in Chicago, you will provide technical leadership in the implementation and optimization of DLP, EDR/XDR, and APT security solutions. You will serve as the point of contact for critical incidents, lead cybersecurity projects, and work closely with various security teams to ensure operational resilience.

Tasks

  • Lead the implementation and optimization of Claroty DLP and Broadcom DLP/CALIX Endpoint DLP, as well as next-generation endpoint protection.
  • Design, implementation, and management of APT security policies, gateway policies, and escalation policies.
  • Troubleshooting gateway, endpoint, and defense issues, as well as configuring tuning patterns for previously unknown scenarios.
  • Conducting threat hunts, pre-entry assessments, proxy-through detection, and handling detected, unexpected malware incidents.
  • Monitoring security events, investigating anomalies, supporting the third layer of detection, and ensuring operational resilience across systems.
  • Conducting threat assessments and ensuring clarity in documentation and configuration.
  • Collaboration with infrastructure, network, analyst, cloud, and AIO security teams.
  • Development of security dashboards and improvement of situational awareness.
  • Providing technical leadership, mentoring, engineering guidance, and solutions for continuous improvement.

Requirements

  • Protect DLP: Endpoint Protection, Defense Suite, CASB, Endpoint DLP.
  • Broadcom DLP: ANT Gateway Administration, Upgrades, Migrations, and Policy Management.
  • Product Collaboration/Support: Incident Response, EDR Prevention, Device Analytics.
  • Security Infrastructure: Routing + Protection, Endpoint & Mobile.
  • Network Security: GTN/IL2, DNS, Threat Management, and Network.
  • Threat Detection and Response: Real-Time Alerts and Phishing Protection.
  • Active Directory Services, SIAM programs, automation, logging, CICD, and desktop packages.

Preferred qualifications

  • Bachelor's degree or equivalent experience.
  • 7+ years of experience in DLP cybersecurity, data protection, exception handling, APT security, or Layer 2 EDR antivirus.
  • Certifications in OSINT, SOAR, CIM, GALLINs, and other modules are preferred.

leadership skills

  • Leading and mentoring large-scale cybersecurity initiatives and platform upgrades.
  • Serve as an escalation point for critical incidents and production issues.
  • Demonstration of engineering expertise, automation, operational excellence, and continuous improvement.
  • Implementation of safety procedures, troubleshooting, and long-term operational planning.
  • Collaboration with cross-functional stakeholders and effective communication with senior management.

We offer

  • Comprehensive benefits package, including retirement benefits (401(k) and pension).
  • Health and Welfare Benefits (medical, dental, vision, spending accounts, and disability).
  • Paid time off (annual and observed holidays, PTO, and earned time off).
  • Additional employee benefits.
  • A strategy for documentary tenure that may include an equity component.
  • A flexible and collaborative work culture with a strong focus on financial freedom and work-life balance.
  • Option to work remotely.
  • A work environment in an inclusive workplace with a focus on professional expertise.

Job details

© 2025 House of Skills by skillaware. All rights reserved.
Our website uses cookies to make navigation easier for you and to analyze the use of the site. You can find more information in our privacy policy.