Job offer
Lead, Cybersecurity Engineer
As a Lead Cybersecurity Engineer at Northern Trust in Chicago, you will provide technical leadership in the implementation and optimization of DLP, EDR/XDR, and APT security solutions. You will serve as the point of contact for critical incidents, lead cybersecurity projects, and work closely with various security teams to ensure operational resilience.
Tasks
- Lead the implementation and optimization of Claroty DLP and Broadcom DLP/CALIX Endpoint DLP, as well as next-generation endpoint protection.
- Design, implementation, and management of APT security policies, gateway policies, and escalation policies.
- Troubleshooting gateway, endpoint, and defense issues, as well as configuring tuning patterns for previously unknown scenarios.
- Conducting threat hunts, pre-entry assessments, proxy-through detection, and handling detected, unexpected malware incidents.
- Monitoring security events, investigating anomalies, supporting the third layer of detection, and ensuring operational resilience across systems.
- Conducting threat assessments and ensuring clarity in documentation and configuration.
- Collaboration with infrastructure, network, analyst, cloud, and AIO security teams.
- Development of security dashboards and improvement of situational awareness.
- Providing technical leadership, mentoring, engineering guidance, and solutions for continuous improvement.
Requirements
- Protect DLP: Endpoint Protection, Defense Suite, CASB, Endpoint DLP.
- Broadcom DLP: ANT Gateway Administration, Upgrades, Migrations, and Policy Management.
- Product Collaboration/Support: Incident Response, EDR Prevention, Device Analytics.
- Security Infrastructure: Routing + Protection, Endpoint & Mobile.
- Network Security: GTN/IL2, DNS, Threat Management, and Network.
- Threat Detection and Response: Real-Time Alerts and Phishing Protection.
- Active Directory Services, SIAM programs, automation, logging, CICD, and desktop packages.
Preferred qualifications
- Bachelor's degree or equivalent experience.
- 7+ years of experience in DLP cybersecurity, data protection, exception handling, APT security, or Layer 2 EDR antivirus.
- Certifications in OSINT, SOAR, CIM, GALLINs, and other modules are preferred.
leadership skills
- Leading and mentoring large-scale cybersecurity initiatives and platform upgrades.
- Serve as an escalation point for critical incidents and production issues.
- Demonstration of engineering expertise, automation, operational excellence, and continuous improvement.
- Implementation of safety procedures, troubleshooting, and long-term operational planning.
- Collaboration with cross-functional stakeholders and effective communication with senior management.
We offer
- Comprehensive benefits package, including retirement benefits (401(k) and pension).
- Health and Welfare Benefits (medical, dental, vision, spending accounts, and disability).
- Paid time off (annual and observed holidays, PTO, and earned time off).
- Additional employee benefits.
- A strategy for documentary tenure that may include an equity component.
- A flexible and collaborative work culture with a strong focus on financial freedom and work-life balance.
- Option to work remotely.
- A work environment in an inclusive workplace with a focus on professional expertise.
Job details