Senior Lead, Security Development & Automation

Job Summary

The Senior Lead, Security Development & Automation is a hands-on technical contributor who helps protect Northern Trust by engineering automation-first security capabilities. This role supports the design and delivery of AI-enabled workflows, API integrations, playbooks, scripts and platform services that strengthen cyber defense, reduce manual operational burden and make security outcomes more consistent, measurable and repeatable. The Senior Lead works with security engineering, operations, infrastructure, application, risk, audit and technology teams to understand high-value security workflows, translate them into automation patterns and deliver solutions that improve control execution, threat response, vulnerability management, evidence collection and operational resilience.

What You'll Do

• Protect Northern Trust Through Security Driven Development and Automation
• Build development and automation capabilities that help protect Northern Trust s technology environment, reduce cyber risk and improve the consistency of security execution.
• Engineer AI agent-based workflows that support security triage, enrichment, correlation, investigation support, evidence collection, control validation and remediation orchestration.
• Create secure API integrations across security platforms, ITSM, CMDB, vulnerability management, cloud, network, identity, data and observability tools to connect signals, decisions and actions.
• Develop reliable workflow automation assets that remove friction from security operations and make high-value controls easier to operate at scale.
• Partner with security architecture, platform engineering, cloud security, IAM, threat and governance teams to apply reusable automation standards, secure engineering patterns, guardrails and operational handoffs.

Key Deliverables

• Develop and support security development and automation capabilities that help Northern Trust protect critical services and data, including:
  • Security workflow automation that accelerates discovery, response, remediation and control validation
  • API integrations and reusable playbooks that connect security platforms, enterprise data sources and operational systems of record
  • AI-enabled assistants and agents that improve security decision support while respecting enterprise controls, approvals and data protection requirements
  • Design and Build LLM-based vulnerability scanning and remediation solutions.
• Integrate LLM capabilities responsibly using enterprise AI platforms such as AI Foundry, approved model providers and vendor AI harnesses to enhance-not replace-security judgment and control execution.
• Develop prompt, retrieval, orchestration, testing and evaluation patterns that make AI-enabled workflows reliable, observable, secure and aligned to enterprise policy.
• Engineer automation with strong authentication, authorization, secrets handling, logging, exception handling, change control and auditability so solutions can be trusted in production security workflows.
• Document architecture, runbooks, decision logic, reusable patterns and operational handoffs so capabilities can be supported, governed and improved over time.
• Contribute to platform roadmaps, vendor integrations and automation priorities by providing practical engineering input tied to risk reduction, control effectiveness, resiliency, stability and reuse.

What You'll Bring

• 12+ years of experience in cybersecurity, software engineering, security automation, cloud engineering, platform engineering, infrastructure automation or related technology disciplines.
• Strong understanding of how development and automation can be used to protect enterprise environments, improve control execution and reduce operational risk.
• Demonstrated ability to operate as a senior technical contributor: supporting solution design, contributing to architecture discussions, delivering complex technical work and helping drive adoption through collaboration and practical execution.
• Hands-on development skills in Python, including API consumption, data transformation, automation frameworks, error handling, testing and operational supportability.
• Experience integrating security, ITSM, cloud, identity, observability or data platforms through REST APIs, webhooks, event-driven patterns, workflow tools or orchestration platforms.
• Working knowledge of LLM-enabled solution patterns, AI agent workflows, retrieval-augmented generation, prompt engineering, model evaluation, AI guardrails and secure use of enterprise AI platforms.
• Ability to deliver in a regulated environment with strong attention to audit-ready evidence, access controls, change management, testability, resiliency and production support.

Nice to Have

• Prior experience in financial services, banking, asset servicing, wealth management or another highly regulated industry.
• Experience with ServiceNow workflows, Vulnerability Response, SecOps, CMDB, ITSM integrations or similar enterprise workflow platforms.
• Experience with Azure AI Foundry, Azure Functions, Logic Apps, GitHub Actions, Terraform, CI/CD pipelines or cloud-native automation patterns.
• Experience building automation for vulnerability management, exposure management, threat response, identity security, network security or cloud security operations.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.