Sr Team Leader, CybSec ThreatM

About Northern Trust:

Northern Trust, a Fortune 500 company, is a globally recognized, award-winning financial institution that has been in continuous operation since 1889.  

Northern Trust is proud to provide innovative financial services and guidance to the world’s most successful individuals, families, and institutions by remaining true to our enduring principles of service, expertise, and integrity. With more than 130 years of financial experience and over 22,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service.

Northern Trust is seeking a Senior Lead to join our team of Threat Analysts that is a self-start, proactive, and detailed oriented. This role requires the individual to be able to assist with detecting, responding, eradicating, and proactively identify threats and close gaps in our detections. In addition, they will have to be able to understand a variety of identity, host, network and web attacks to create new detections, conduct incident reviews, and mentor other analysts. The ideal candidate will be knowledgeable about the Cyber Kill Chain, MITRE ATT&CK framework, experience with working in a Security Operations Center and exhibit strong problem solving skills.

Day to Day: 
- Analyze security threats and attack vectors to assess its probability and impact on the organization
- Assists in the incident response function with the analysis of identity, host, network, email and web related incidents
- Evaluation of current security detections/controls for identified gaps and improve our detections
- Implement automation to assist analysts with their response
- Mentor and train newer analysts helping them improve their knowledge and skills

Existing Knowledge:
- Attack classifications, impact, system and application vulnerabilities
- OSI network layers and protocols, Cyber Kill Chain, and Mitre ATT&CK framework
- Email analysis including headers and threat actor techniques
- Dynamic and static malware analysis using a sandbox environment transposing those findings to improve detection and response

Preferred Experience:
- 4+ years in a Security Operations Center with triaging incidents and supporting the Incident Response (IR) process
- Experience with using investigative tools around email security, host based detections, network behavior, and cloud technologies
- Excellent problem solving, critical thinking, and analytical skills

Nice to Have:
- Strong interpersonal skills and ability to work collaboratively across global teams
- Excellent written and verbal communication skills
- Forensic knowledge of Windows, Mac OS and/or Linux
- Certifications such as the GSOC, GCIH, GCIA, GCFR, GCFE or similar

Salary Range:

Salary range is a good faith estimate of base pay. Northern Trust provides a comprehensive benefits package including retirement benefits (401k and pension), health and welfare benefits (medical, dental, vision, spending accounts and disability), paid time off, parental and caregiver leave, life & accident insurance, and other voluntary and well-being benefits. Northern Trust also provides a discretionary bonus program that may include an equity component.

Working with Us: 

As a Northern Trust partner, greater achievements await. You will be part of a flexible and collaborative work culture in an organization where financial strength and stability is an asset that emboldens us to explore new ideas.

Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to assisting the communities we serve! Join a workplace with a greater purpose.

We’d love to learn more about how your interests and experience could be a fit with one of the world’s most admired and sustainable companies! Build your career with us and apply today. #MadeForGreater 

Reasonable accommodation

Northern Trust is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation for any part of the employment process, please email our HR Service Center at MyHRHelp@ntrs.com.

 
We hope you’re excited about the role and the opportunity to work with us. We value an inclusive workplace and understand flexibility means different things to different people.

Apply today and talk to us about your flexible working requirements and together we can achieve greater.