Cybersecurity Analyst

HomeXpress Mortgage is hiring a Cybersecurity Analyst to support day to day security operations in a cloud-first environment. On-site in Santa Ana with hybrid flexibility. Not a remote position. This role owns vulnerability management, security monitoring, email defense, and internal security testing. You will work directly with the VP of Cybersecurity and Infrastructure in a regulated lending environment., * Monitor and triage alerts in our SIEM and respond within defined SLAs

• Participate in incident response, including containment, investigation, and post-incident reporting
• Build and tune detection rules and use cases to reduce false positives
• Own vulnerability management across endpoint, cloud, and automated testing sources, tracking remediation to closure
• Run the internal and external penetration testing program on schedule and report findings
• Manage email security tooling and confirm malicious senders are blocked
• Investigate user-reported phishing and take corrective action
• Operate security awareness phishing simulations
• Support data loss prevention and data security posture monitoring
• Support periodic user access reviews and certifications
• Produce clear daily and weekly findings summaries for leadership
• Maintain documentation and support audit and regulatory requests

This is a hands-on operational role. We are looking for someone reliable, detail-driven, and accountable, who takes ownership of recurring work and escalates early when something is off., * Meticulous and committed to the highest quality.

• Initiative-taker with positive Can-Do attitude.
• Works well under pressure and relishes the responsibility that comes with the job.
• Problem solving and analysis.
• Communication proficiency.
• An open-minded individual that embraces change and innovation.
• Team and Project leadership/management experience.
• Excellent written and verbal communications skills.
• Possess the knowledge, skills, and ability to operate an advanced cyber analytical toolkit and perform required assessments.
• Possess expert knowledge of IT and network systems - both on-prem and SaaS.
• Experience with firewalls and network technologies.
• Experience installing, configuring, administering software applications.
• Demonstrated skills in troubleshooting problems with software and hardware.
• Experience configuring, managing, and maintaining networking equipment.
• Experience in Vulnerability Alert processes., * 4+ years in a security operations or analyst role
• Hands-on experience with a SIEM platform
• Working knowledge of vulnerability management and remediation tracking
• Familiarity with cloud identity and Microsoft 365 security tooling
• Strong written communication and consistent follow-through on recurring tasks
• Ability to work independently and escalate appropriately

EDUCATION:

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field, or equivalent work experience.

EXPERIENCE:

• Experience in a regulated industry, financial services or mortgage a plus
• Familiarity with email security, DLP, DSPM, or penetration testing tools, * This position is in an office setting with computer and general office equipment. The position requires the ability to move freely around within the department and other department locations.

HomeXpress - Your Leading Non-QM Mortgage Lender.

Join our growing team and be part of the Top Non-QM Lender in the Business.

We are known for closing mortgage loans with speed, ease, and convenience.

Licensed in 46 States, we provide brokers with a full suite of mortgage products, including VA, FHA, & FHLMC.

If you have a service first mentality and thrive in a fast-paced environment, HomeXpress is the place for you.

Join us as we continue to grow and expand our business to the Non-Delegated Correspondent Channel!