About Northern Trust:
Northern Trust, a Fortune 500pany, is a globally recognized, award-winning financial institution that has been in continuous operation since 1889.
Northern Trust is proud to provide innovative financial services and guidance to the world's most successful individuals, families, and institutions by remaining true to our enduring principles of service, expertise, and integrity. With more than 130 years of financial experience and over 22,000 partners, we serve the world's most sophisticated clients using leading technology and exceptional service.
Role/ Department:
The Purple Team operator will play a crucial role in our cybersecurity team by planning and executing threat actor emulations to assess Northern Trust's exposure to the latest techniques, tactic and procedures. The ideal candidate will be responsible for developing, planning and executing advanced intelligence-lead adversary simulations to identify cybersecurity gaps to improve overall defenses and detections. This role requires a deep understanding of threat actor tactics, techniques, and procedures (TTPs), and a passion for defending against evolving cyber threats.
The key responsibilities of the role include:
1. Perform intelligence led adversary simulation exercises.
2. Provide rmendation to security operations team for improving controls and defenses based on adversary simulation exercises.
3. Assist Security Operations to continuously test and improve detections, logging, SIEM use cases, and incident response playbooks.
4. Staying up-to date on the latest attack tactics, techniques, and procedures ( TTPs) used by threat actors.
5. Continuous improvement of the bank's security posture by Identifying gaps in processes and technology, and evaluating existing security controls.
6. Develop reports that include technical findings, risk ratings, and strategic rmendations.
7. Build and maintain custom tools and scripts to support adversary simulation.
Skills/ Qualifications:
8. Experience in cybersecurity, with hands-on experience in red teaming, blue teaming, or both
9. Strong understanding of MITRE ATT&CK framework.
10. Experience with coding/scripting languages such as Python, PowerShell, or Bash.
11. Strong understanding of cybersecurity principles, including SIEM, IDS/IPS, and endpoint detection and response (EDR) solutions.
12. Experience with Offensive Security and Purple Team tools Cobalt Strike, Metasploit, Caldera, Mythic.
Working with Us:
As a Northern Trust partner, greater achievements await. You will be part of a flexible and collaborative work culture in an organization where financial strength and stability is an asset that emboldens us to explore new ideas.
Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for apanymitted to assisting themunities we serve Join a workplace with a greater purpose.
We'd love to learn more about how your interests and experience could be a fit with one of the world's most admired and sustainablepanies Build your career with us and apply today. #MadeForGreater
Reasonable amodation
Northern Trust ismitted to working with and providing reasonable amodations to individuals with disabilities. If you need a reasonable amodation for any part of the employment process, please email our HR Service Center at MyHRHelp@ntrs .
We hope you're excited about the role and the opportunity to work with us. We value an inclusive workplace and understand flexibility means different things to different people.
Apply today and talk to us about your flexible working requirements and together we can achieve greater.
Job ID R143462