> Markdown version of [/jobs/ext/1459053-senior-security-engineer](https://www.wearedevelopers.com/jobs/ext/1459053-senior-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Security Engineer - **Company:** Neighborhood Loans - **Location:** Downers Grove, IL, United States (Remote available) - **Experience:** Expert - **Salary:** $120,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Microsoft Azure, Cyber Security, Continuous Integration, Encompass, Identity and Access Management, Python (Programming Language), Microsoft Security Essentials, Windows PowerShell, Systems Development Life Cycle, Phishing, Scripting, Software Security, Bicep, Terraform, Key Vault, Static Application Security Testing, Dynamic Application Security Testing - **Published:** July 27, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=63addcb0fd31986a ## About the Role * A minimum of 7 years of experience in information security, including hands-on experience securing and operating enterprise environments. * Strong working knowledge of Azure and Microsoft security technologies, including Entra ID, Conditional Access, Key Vault, identity management, etc. * Demonstrated experience with application security and secure-SDLC tooling (SAST, DAST, and software composition analysis) and CI/CD security integration. * Experience administering EDR/MDRs like Bitdefender and secure email gateways such as Mimecast * Strong written communication skills, with the ability to author security policies, standards, and operational documentation. * Experience in a regulated industry (financial services, mortgage, or banking) and familiarity with applicable frameworks such as NIST, GLBA, PCI or HIPAA. * Sound judgment in prioritizing and right-sizing security controls relative to organizational risk., * Mortgage or fintech experience; familiarity with Encompass or a comparable loan origination system. * Proficiency with scripting and infrastructure-as-code (PowerShell, Python, Bicep, or Terraform). * Experience with identity and privileged access management (IAM/PAM). * Relevant industry certifications (e.g., CISSP, CCSP, CISA, AZ-500, SC-100)., * Do you have mortgage or fintech industry experience, including experience with Encompass or other loan origination systems?, * information security: 5 years (Preferred) ## Description We are seeking a Senior Security Engineer to join our team. Neighborhood Loans is a regulated, multi-state mortgage lender operating in a Microsoft-centric technology environment. As the organization continues to grow, we are investing in further hardening and strengthening our established security program, and we are seeking an experienced Senior Security Engineer to support that work., * Harden and maintain the security configuration of the Azure and Microsoft 365 environment, including Entra ID, Conditional Access, network controls, and Key Vault. * Develop and operate the application security program, including SAST, DAST, software composition analysis, and security checks integrated into the CI/CD pipeline. * Administer and tune email security and anti-phishing controls in Mimecast, including policy configuration and response to delivered threats. * Author and maintain security policies, standards, and supporting documentation, including in support of the organization's SOC 2 efforts. * Support detection and incident response in coordination with the organization's managed detection and response (MDR) provider. * Contribute to third-party and vendor risk reviews and to GLBA Safeguards Rule compliance activities. ## Related Videos - [Let’s Talk Quality!](https://www.wearedevelopers.com/videos/100012-let-s-talk-quality) - [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls) - [Back(end) to the Future: Embracing the continuous Evolution of Infrastructure and Code](https://www.wearedevelopers.com/videos/440-back-end-to-the-future-embracing-the-continuous-evolution-of-infrastructure-and-code) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Skynet wants your Passwords! The Role of AI in Automating Social Engineering](https://www.wearedevelopers.com/videos/770-skynet-wants-your-passwords-the-role-of-ai-in-automating-social-engineering) - [Why Security-First Development Helps You Ship Better Software Faster](https://www.wearedevelopers.com/videos/1568-why-security-first-development-helps-you-ship-better-software-faster) ## Related Articles - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)