Principal, Security Development & Automation

Job Summary

The Principal, Security Development & Automation is a senior technical contributor who helps protect Northern Trust by engineering automation-first security capabilities. This role is responsible for designing and delivering AI-enabled workflows, API integrations, playbooks, scripts and platform services that strengthen cyber defense, reduce manual operational burden and make security outcomes more consistent, measurable and repeatable. The Principal Partner works across security engineering, operations, infrastructure, application, risk, audit and technology teams to identify high-value security workflows, translate them into automation patterns and deliver solutions that improve control execution, threat response, vulnerability management, evidence collection and operational resilience.

What Youll Do

Protect Northern Trust Through Security Driven Development and Automation

• Build development and automation capabilities that help protect Northern Trust s technology environment, reduce cyber risk and improve the consistency of security execution.
• Engineer AI agent-based workflows that support security triage, enrichment, correlation, investigation support, evidence collection, control validation and remediation orchestration.
• Create secure API integrations across security platforms, ITSM, CMDB, vulnerability management, cloud, network, identity, data and observability tools to connect signals, decisions and actions.
• Develop reliable workflow automation assets that remove friction from security operations and make high-value controls easier to operate at scale.
• Partner with security architecture, platform engineering, cloud security, IAM, threat and governance teams to create reusable automation standards, secure engineering patterns, guardrails and operational handoffs.

Key Deliverables

• Own development and automation capabilities that help Northern Trust protect critical services and data, including:
• Security workflow automation that accelerates discovery, response, remediation and control validation
• API integrations and reusable playbooks that connect security platforms, enterprise data sources and operational systems of record
• AI-enabled assistants and agents that improve security decision support while respecting enterprise controls, approvals and data protection requirements
• Design and Build LLM-based vulnerability scanning and remediation solutions.
• Integrate LLM capabilities responsibly using enterprise AI platforms such as AI Foundry, approved model providers and vendor AI harnesses to enhance-not replace-security judgment and control execution.
• Develop prompt, retrieval, orchestration, testing and evaluation patterns that make AI-enabled workflows reliable, observable, secure and aligned to enterprise policy.
• Engineer automation with strong authentication, authorization, secrets handling, logging, exception handling, change control and auditability so solutions can be trusted in production security workflows.
• Document architecture, runbooks, decision logic, reusable patterns and operational handoffs so capabilities can be supported, governed and improved over time.
• Influence platform roadmaps, vendor integrations and automation priorities based on risk reduction, control effectiveness, resiliency, stability and reuse.
• Mentor junior team members

What Youll Bring

• 15+ years of experience in cybersecurity, software engineering, security automation, cloud engineering, platform engineering, infrastructure automation or related technology disciplines.
• Strong understanding of how development and automation can be used to protect enterprise environments, improve control execution and reduce operational risk.
• Demonstrated ability to operate as a principal-level technical partner: setting direction, influencing architecture, mentoring engineers, leading complex technical delivery and driving adoption across teams without relying on direct authority.
• Hands-on development skills in Python, including API consumption, data transformation, automation frameworks, error handling, testing and operational supportability.
• Experience integrating security, ITSM, cloud, identity, observability or data platforms through REST APIs, webhooks, event-driven patterns, workflow tools or orchestration platforms.
• Working knowledge of LLM-enabled solution patterns, AI agent workflows, retrieval-augmented generation, prompt engineering, model evaluation, AI guardrails and secure use of enterprise AI platforms.
• Ability to deliver in a regulated environment with strong attention to audit-ready evidence, access controls, change management, testability, resiliency and production support.

Nice to Have

• Prior experience in financial services, banking, asset servicing, wealth management or another highly regulated industry.
• Experience with ServiceNow workflows, Vulnerability Response, SecOps, CMDB, ITSM integrations or similar enterprise workflow platforms.
• Experience with Azure AI Foundry, Azure Functions, Logic Apps, GitHub Actions, Terraform, CI/CD pipelines or cloud-native automation patterns.
• Experience building automation for vulnerability management, exposure management, threat response, identity security, network security or cloud security operations.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.