Senior Infrastructure Security Engineer

Join Tower Loan of Mississippi, LLC onsite in Flowood, MS as a senior security engineer focused on enterprise infrastructure, networks, systems, and sensitive data.

Responsibilities

• Design, implement, administer, and continuously improve cybersecurity controls for on-premises data centers, branch locations, endpoints, networks, and corporate systems
• Administer and optimize security platforms, including Fortinet FortiGate, FortiManager, FortiAnalyzer, CrowdStrike Falcon, Proofpoint, Zscaler, and related technologies
• Configure and strengthen firewall policies, intrusion prevention, VPN security, network segmentation, and secure remote access controls
• Monitor security events, alerts, logs, and threat intelligence to detect suspicious activity, unauthorized access, vulnerabilities, and potential incidents
• Lead technical security investigations and incident response, including threat analysis, containment, remediation, recovery, and root-cause analysis
• Develop and maintain endpoint detection and response capabilities, including prevention policies, detection rules, and response procedures
• Manage email security protections, including phishing prevention, malicious attachment detection, email authentication, and data loss prevention
• Strengthen Microsoft Entra ID and Active Directory security, including multifactor authentication, Conditional Access, privileged access, service accounts, and access control policies
• Conduct vulnerability assessments, evaluate findings, prioritize remediation, and coordinate with infrastructure and application teams to reduce exposure
• Establish and maintain system hardening standards and secure configuration baselines for Windows Server, VMware, network devices, and other infrastructure
• Evaluate network architectures, routing, SD-WAN, VPN connectivity, and segmentation designs to identify weaknesses and recommend security improvements
• Implement and maintain centralized security logging, monitoring, dashboards, alerting, and event correlation to improve enterprise visibility
• Perform security assessments of new technologies, infrastructure changes, network configurations, and system implementations
• Support ransomware protection, backup security, immutable storage, disaster recovery safeguards, and security aspects of business continuity planning
• Develop automation using PowerShell, Python, or other tools to improve monitoring, threat detection, and vulnerability remediation
• Support PCI DSS, SOC 2, internal security audits, risk assessments, and other applicable regulatory and cybersecurity compliance requirements
• Develop and maintain security policies, technical standards, incident response procedures, security diagrams, and supporting documentation
• Collaborate with infrastructure, network, application development, and support teams to integrate security into operations and projects
• Research emerging threats, attack techniques, vulnerabilities, and security technologies, recommending practical improvements
• Serve as a senior technical escalation resource for complex security issues and provide guidance to IT team members
• Perform all other duties as assigned

Requirements

• 5+ years of progressively responsible experience in cybersecurity engineering, infrastructure security, network security, or related technical roles
• Strong knowledge of cybersecurity architecture, infrastructure security, network security, and defensive security engineering
• Advanced experience with firewalls, intrusion prevention, endpoint security, email security, identity protection, and threat detection
• Strong understanding of enterprise LAN, WAN, SD-WAN, VPN, routing, switching, segmentation, and common network protocols from a security perspective
• Working knowledge of Windows Server, Active Directory, VMware virtualization, enterprise storage, and on-premises data center infrastructure
• Demonstrated ability to analyze security events, investigate suspicious activity, and coordinate technical incident response and remediation
• Proficiency in vulnerability management, security hardening, risk assessment, and secure configuration practices
• Understanding of SIEM platforms, log analysis, endpoint detection and response, and security automation
• Knowledge of identity and access management, authentication protocols, privileged access security, and Zero Trust principles
• Strong analytical, troubleshooting, and problem-solving skills across multiple infrastructure components
• Ability to independently assess technical risks, recommend security controls, and coordinate remediation across technical teams
• Strong communication and documentation skills for technical and nontechnical stakeholders
• Ability to exercise sound judgment and maintain confidentiality when handling sensitive company information and security incidents

Education & Experience

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Network Engineering, or a related field preferred (equivalent professional experience may be considered)
• Hands-on experience implementing, administering, and troubleshooting enterprise cybersecurity technologies required
• Experience securing enterprise networks, Windows Server environments, virtualization infrastructure, and on-premises data centers strongly preferred
• Leading cybersecurity incident response required, including coordinating technical responders and directing containment, remediation, recovery, and post-incident review
• Experience with vulnerability remediation, endpoint protection, firewall security, and identity security required
• Industry certifications such as CISSP, Security+, CySA+, GIAC, Fortinet, Microsoft Security, CrowdStrike, or other cybersecurity certifications beneficial but not required

Technologies

• Fortinet FortiGate, Fortinet FortiManager, Fortinet FortiAnalyzer, Fortinet FortiAnalyzer
• CrowdStrike Falcon
• Proofpoint
• Zscaler
• Microsoft Entra ID, Active Directory
• Windows Server, VMware, VMware NSX
• PowerShell, Python
• SIEM platforms, Microsoft Defender, Microsoft Sentinel, Splunk
• PCI DSS, SOC 2
• NIST Cybersecurity Framework, CIS Controls
• FortiClient EMS
• Cohesity, Zerto, Pure Storage

Physical Requirements

• Stand, walk, and/or sit for eight (8) hours a day
• Communicate effectively, verbally and in writing, in person, via telephone, or electronically
• Lift and maneuver up to 20 lbs