Tech Lead, Cyber Security Analyst

About Northern Trust:

Northern Trust, a Fortune 500 company, is a globally recognized, award-winning financial institution that has been in continuous operation since 1889.

Northern Trust is proud to provide innovative financial services and guidance to the world’s most successful individuals, families, and institutions by remaining true to our enduring principles of service, expertise, and integrity. With more than 130 years of financial experience and over 22,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service.

Location: Hybrid Work Location 3/2 In Office/Remote in Northern Trusts Naperville Location

Position Description:

As part of Northern Trust’s security operations center (SOC), a Tech Lead Security Analyst will conduct security monitoring, security incident identification, incident prioritization, incident escalation and directed response support functions. The Tech Lead will play a crucial role as technical leader to the team by helping leadership to create improvements to team incident response tactics. The Tech Lead will also be responsible in helping leadership to shape junior analyst’s technical capabilities. As part of the security operations team this role will be instrumental in executing Northern Trust’s 24x7 security monitoring model, creating a resilient and unified team that improves NT’s ability to protect and defend its networks and information. This role reports to the Security Operations Manager.

Responsibilities:

Monitor for alerts/security Incidents from security tools.

Provide first response and overwatch support to junior analysts by helping to analyzing alerts and gathering information about potential incidents or vulnerabilities.

Conducts incident analysis and response based on predefined procedures.

Creates remediation tickets and tracks tickets to closure.

Leverages Northern Trust’s security runbooks and playbooks to triage alerts.

Support Threat Hunt and Threat Intel teams by creating or providing feedback to these team to help improve overall security posture.

Help Leadership to assess and improve analyst technical capabilities and triage techniques.

Qualifications / Experience:

Bachelor’s degree in Computer Science or other IT related field.

Minimum of 5+ years of experience working in an information security monitoring & response role in a large, complex environment.

Solid understanding of the Cyber Incident Response Process & Life Cycle.

Intermediate knowledge of security monitoring tools such as SIEM, IPS/IDS, Proxy, Email Security Platforms, Security & Data Analytics Platforms with an understanding of analytic query languages and EDR/XDR solutions.

Experience managing incident tickets in products in Enterprise Ticket Platforms.

Malware Reversing and Computer Forensic skills are a plus.

Strong analytical and technical skills.

Self motivated, proactive and able to work independently.

Strong communication skills.

Working with Us:

As a Northern Trust partner, greater achievements await. You will be part of a flexible and collaborative work culture in an organization where financial strength and stability is an asset that emboldens us to explore new ideas.

Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to assisting the communities we serve! Join a workplace with a greater purpose.

We’d love to learn more about how your interests and experience could be a fit with one of the world’s most admired and sustainable companies! Build your career with us and apply today. #MadeForGreater

Reasonable accommodation

Northern Trust is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation for any part of the employment process, please email our HR Service Center at .

We hope you’re excited about the role and the opportunity to work with us. We value an inclusive workplace and understand flexibility means different things to different people.

Apply today and talk to us about your flexible working requirements and together we can achieve greater.

R125675