Cyber Purple Team Operator

Social network you want to login/join with:

About Northern Trust:

Northern Trust, a Fortune 500 company, is a globally recognized, award-winning financial institution that has been in continuous operation since 1889.

Northern Trust is proud to provide innovative financial services and guidance to the world's most successful individuals, families, and institutions by remaining true to our enduring principles of service, expertise, and integrity. With more than 130 years of financial experience and over 22,000 partners, we serve the world's most sophisticated clients using leading technology and exceptional service.

Role/ Department:

The Purple Team operator will play a crucial role in our cybersecurity team by planning and executing threat actor emulations to assess Northern Trust's exposure to the latest techniques, tactics, and procedures. The ideal candidate will be responsible for developing, planning, and executing advanced intelligence-led adversary simulations to identify cybersecurity gaps and improve overall defenses and detections. This role requires a deep understanding of threat actor TTPs and a passion for defending against evolving cyber threats.

The key responsibilities of the role include:

1. Perform intelligence-led adversary simulation exercises.
2. Provide recommendations to the security operations team for improving controls and defenses based on adversary simulation exercises.
3. Assist Security Operations to continuously test and improve detections, logging, SIEM use cases, and incident response playbooks.
4. Stay up-to-date on the latest attack TTPs used by threat actors.
5. Continuously improve the bank's security posture by identifying gaps in processes and technology, and evaluating existing security controls.
6. Develop reports that include technical findings, risk ratings, and strategic recommendations.
7. Build and maintain custom tools and scripts to support adversary simulation.

Skills/Qualifications:

• Experience in cybersecurity, with hands-on experience in red teaming, blue teaming, or both.
• Strong understanding of the MITRE ATT&CK framework.
• Experience with coding/scripting languages such as Python, PowerShell, or Bash.
• Strong understanding of cybersecurity principles, including SIEM, IDS/IPS, and EDR solutions.
• Experience with Offensive Security and Purple Team tools such as Cobalt Strike, Metasploit, Caldera, Mythic.

Working with Us:

As a Northern Trust partner, greater achievements await. You will be part of a flexible and collaborative work culture in an organization where financial strength and stability are assets that embolden us to explore new ideas.

Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to assisting the communities we serve Join a workplace with a greater purpose.

We'd love to learn more about how your interests and experience could fit with one of the world's most admired and sustainable companies Build your career with us and apply today. #MadeForGreater

Reasonable accommodation:

Northern Trust is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation for any part of the employment process, please email our HR Service Center at MyHRHelp@ntrs.

We hope you're excited about the role and the opportunity to work with us. We value an inclusive workplace and understand flexibility means different things to different people.

Apply today and talk to us about your flexible working requirements, and together we can achieve greater.

Job ID R143462