Position Summary
The Vulnerability Management Engineer is responsible for supporting, maintaining, and enhancing enterprise vulnerability management, security configuration compliance, cloud security, and exposure management technologies.
This hands-on role focuses on security platform support, technical troubleshooting, automation, integrations, and continuous improvement. The engineer will collaborate closely with the Vulnerability Management Engineering team to maintain reliable security platforms, improve processes, and support new security capabilities.
Key Responsibilities
- Support, configure, maintain, and troubleshoot enterprise vulnerability management and security platforms, including Qualys, Wiz, and equivalent technologies.
- Support vulnerability scanning infrastructure, including scanners, agents, authentication, scan configurations, performance, and asset coverage.
- Support Qualys Vulnerability Management and Policy Compliance, including security assessments, compliance policies, configuration controls, and reporting.
- Support cloud security and vulnerability management capabilities within Microsoft Azure and other enterprise environments.
- Assist with Kubernetes and container security, including vulnerability scanning, image assessments, and platform integrations.
- Assist in developing Python scripts, API integrations, and automation to improve platform efficiency and reduce manual processes.
- Support integrations between security platforms, asset management systems, and IT service management workflows.
- Monitor and troubleshoot scanning failures, data ingestion, platform connectivity, integration issues, and data-quality gaps.
- Support Attack Surface Management and exposure management capabilities, including asset discovery, external exposure, and security data enrichment.
- Participate in evaluating AI-driven automation and security workflow improvements.
- Assist with platform upgrades, testing, migrations, and implementation of new security capabilities.
- Collaborate with the VM Engineering team to identify opportunities for automation, platform optimization, and continuous improvement.
- Maintain technical documentation, platform configurations, support procedures, and engineering runbooks.
Required Qualifications
- 3+ years of relevant experience or equivalent practical experience in vulnerability management, cybersecurity engineering, infrastructure security, cloud security, or a related technical discipline.
- Hands-on experience supporting enterprise vulnerability management or security assessment platforms, preferably Qualys or equivalent technologies.
- Experience troubleshooting vulnerability scanners, agents, authentication, connectivity, and security platform issues.
- Working knowledge of Windows, Linux, networking, and Microsoft Azure or equivalent cloud environments.
- Understanding of vulnerability scanning, security assessments, and security configuration compliance.
- Strong analytical, troubleshooting, and problem-solving skills, with the ability to learn and adapt to new security technologies.
- Ability to work independently on routine technical issues and collaborate effectively with engineering teams.
Preferred Qualifications
- Experience with Qualys Vulnerability Management and Policy Compliance.
- Familiarity with Wiz, Microsoft Azure security, and cloud configuration assessments.
- Basic experience with Python scripting, REST APIs, JSON, or security automation, with a willingness to develop additional skills.
- Familiarity with Kubernetes, containers, and container security technologies.
- Understanding of Attack Surface Management, exposure management, and security integrations.
- Exposure to AI-driven automation and security workflow technologies.
- Experience supporting enterprise security platforms in large environments.
Three Must-Have Qualifications
1. Vulnerability Management / Security Platform Experience
3+ years of relevant experience or equivalent practical experience supporting vulnerability management or comparable enterprise security technologies, preferably Qualys.
2. Technical Troubleshooting & Platform Support
Hands-on experience configuring, maintaining, and troubleshooting vulnerability scanners, agents, authentication, connectivity, and security platform issues.
3. Infrastructure & Cloud Security Fundamentals
Working knowledge of Windows, Linux, networking, Microsoft Azure or equivalent cloud environments, and security configuration compliance.
Salary Range:
Salary range is a good faith estimate of base pay. Northern Trust provides a comprehensive benefits package including retirement benefits (401k and pension), health and welfare benefits (medical, dental, vision, spending accounts and disability), paid time off, parental and caregiver leave, life & accident insurance, and other voluntary and well-being benefits. Northern Trust also provides a discretionary bonus program that may include an equity component.
