Senior Security Engineer

The Senior Security Engineer will be a hands-on security professional responsible for hardening controls across cloud, application, network, and email security in a regulated mortgage lending environment. This role reports to the Chief Information Officer.

Responsibilities

• Secure and continuously tune the Azure and Microsoft 365 security posture, covering Entra ID, Conditional Access policies, network controls, and Key Vault.
• Design and operate the application security program, incorporating SAST, DAST, software composition analysis, and security checks embedded into the CI/CD workflow.
• Manage Mimecast email security and anti-phishing controls, configuring policies and responding to threats delivered to users.
• Create and maintain security policies, standards, and supporting documentation, including efforts related to SOC 2.
• Assist with detection and incident response in collaboration with the MDR provider.
• Participate in third-party and vendor risk assessments and GLBA Safeguards Rule compliance activities.

Requirements

• At least seven years of information security experience, with hands-on work securing and operating enterprise environments.
• Solid expertise in Azure and Microsoft security technologies, including Entra ID, Conditional Access, Key Vault, and identity management.
• Proven experience implementing application security and secure SDLC tooling such as SAST, DAST, and software composition analysis, with CI/CD security integration.
• Experience administering EDR/MDR solutions such as Bitdefender and securing email gateways like Mimecast.
• Strong written communication abilities, including authoring security policies, standards, and operational documents.
• Background in a regulated industry (financial services, mortgage, or banking) with familiarity with frameworks such as NIST, GLBA, PCI or HIPAA.
• Judicious prioritization and right-sizing of security controls in relation to organizational risk.

Technologies

• Azure
• Microsoft 365
• Entra ID
• Conditional Access
• Key Vault
• Mimecast
• Bitdefender
• SAST
• DAST
• Software composition analysis
• Encompass
• PowerShell
• Python
• Bicep
• Terraform
• EDR
• MDR
• NIST
• GLBA
• PCI
• HIPAA

Benefits

• 401(k)
• Dental insurance
• Health insurance
• Paid time off
• Vision insurance

Pay

From $120,000.00 per year

Application Question(s)

• Do you have mortgage or fintech industry experience, including experience with Encompass or other loan origination systems?

Experience

Preferred: information security experience of 5 years.

Work Location

Hybrid remote in Downers Grove, IL 60515

Job Type / Additional Information

• Full-Time
• Primarily Remote / Chicagoland area candidates preferred
• Reports to Chief Information Officer

About Us

At Neighborhood Loans, we are passionate mortgage lending professionals with one goal in mind: making our clients our priority. As a residential mortgage lender, we focus on educating and empowering consumers in a rapidly changing market. Our mission is to provide exceptional service based on the highest standards of ethics, values, and customer care—with the goal of earning the loyalty and trust of homeowners who become lifelong clients and friends.