Senior Security Engineer

We are seeking a Senior Security Engineer to join our team. Neighborhood Loans is a regulated, multi-state mortgage lender operating in a Microsoft-centric technology environment. As the organization continues to grow, we are investing in further hardening and strengthening our established security program, and we are seeking an experienced Senior Security Engineer to support that work., * Harden and maintain the security configuration of the Azure and Microsoft 365 environment, including Entra ID, Conditional Access, network controls, and Key Vault.

• Develop and operate the application security program, including SAST, DAST, software composition analysis, and security checks integrated into the CI/CD pipeline.
• Administer and tune email security and anti-phishing controls in Mimecast, including policy configuration and response to delivered threats.
• Author and maintain security policies, standards, and supporting documentation, including in support of the organization’s SOC 2 efforts.
• Support detection and incident response in coordination with the organization’s managed detection and response (MDR) provider.
• Contribute to third-party and vendor risk reviews and to GLBA Safeguards Rule compliance activities.

• A minimum of 7 years of experience in information security, including hands-on experience securing and operating enterprise environments.
• Strong working knowledge of Azure and Microsoft security technologies, including Entra ID, Conditional Access, Key Vault, identity management, etc.
• Demonstrated experience with application security and secure-SDLC tooling (SAST, DAST, and software composition analysis) and CI/CD security integration.
• Experience administering EDR/MDRs like Bitdefender and secure email gateways such as Mimecast
• Strong written communication skills, with the ability to author security policies, standards, and operational documentation.
• Experience in a regulated industry (financial services, mortgage, or banking) and familiarity with applicable frameworks such as NIST, GLBA, PCI or HIPAA.
• Sound judgment in prioritizing and right-sizing security controls relative to organizational risk., * Mortgage or fintech experience; familiarity with Encompass or a comparable loan origination system.
• Proficiency with scripting and infrastructure-as-code (PowerShell, Python, Bicep, or Terraform).
• Experience with identity and privileged access management (IAM/PAM).
• Relevant industry certifications (e.g., CISSP, CCSP, CISA, AZ-500, SC-100)., * Do you have mortgage or fintech industry experience, including experience with Encompass or other loan origination systems?, * information security: 5 years (Preferred)

Pulled from the full job description

• 401(k)
• Health insurance
• Paid time off
• Vision insurance
• Dental insurance, * 401(k)
• Dental insurance
• Health insurance
• Paid time off
• Vision insurance

At Neighborhood Loans, we are passionate mortgage lending professionals with one goal in mind: making our clients our priority. As a residential mortgage lender, we focus on educating and empowering consumers in a rapidly changing market. Our mission is to provide exceptional service based on the highest standards of ethics, values, and customer care-with the goal of earning the loyalty and trust of homeowners who become lifelong clients and friends.