Associate, Cybr Sec ThreatMgmt at Northern Trust

Candidates should possess relevant experience in information security and adversary simulation, along with detailed knowledge of global cyber threats, threat actors, and their tactics, techniques, and procedures, particularly those targeting the financial services sector. Experience in large-scale information technology implementations and operations is preferred, and industry certifications such as OSCP, OSCE, OSWE, GPEN, GCIH, GWAPT, or GXPN are highly desirable. Proficiency in exploitation and post-exploitation frameworks like Cobalt Strike, Metasploit Framework, and Empire is required, alongside skills in scripting languages such as Python, PowerShell, Bash, or Ruby. Advanced knowledge of Windows Operating System architecture and internals is also necessary, including familiarity with TCP/IP networking, Windows & Active Directory, Unix/Linux, Mainframe, Cloud Service Providers, Relational Databases, Data Warehouses, and filesystems.