Senior Information Security Engineer

AD Mortgage; Troy (MI); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

PTO

Sick days

Volunteer hours

Medical insurance

Dental insurance

Vision insurance

401(k)

Job summary

AD Mortgage is seeking a hands-on Senior Information Security Engineer to design, implement, and maintain our core cybersecurity infrastructure. You will translate security policies into robust configurations, lead threat detection, and engineer defenses across cloud, network, and endpoints.

The role is based in Troy, MI with typical office hours, focusing on practical risk mitigation, incident response, and mentorship of junior staff.

Qualifications

• 5+ years of hands-on cybersecurity engineering experience.
• Deep expertise with SIEM/SOAR, EDR, DLP, and vulnerability scanners.
• Strong understanding of OSI model, secure tunneling, and offensive security tools.
• CISSP/CASP+ or advanced vendor credentials preferred.

Responsibilities

• Configure log ingestion pipelines and detection queries in SIEM/SOAR.
• Translate security policies into concrete controls and firewall rules.
• Deploy and tune DLP rules to prevent data exfiltration.
• Manage global EDR agents and incident containment procedures.
• Conduct credentialed internal vulnerability scans and penetration testing.
• Analyze network traffic to enforce perimeter defense and micro-segmentation.
• Support secure remote access architectures and MFA integrations.
• Mentor junior admins on secure engineering practices.

Skills

SIEM/SOAR

EDR administration

DLP deployment

Vulnerability management

Penetration testing

Network security

MFA integration

Education

CISSP

CASP+

Vendor-specific certifications

Tools

SIEM/SOAR platforms

EDR consoles

DLP modules

Vulnerability scanners

Job description

About This Opportunity

We are looking for a hands‑on, highly technical Senior Information Security Engineer to design, implement, and maintain our core cybersecurity infrastructure. Serving as a primary technical expert, you will translate high‑level security policies into robust system configurations, lead proactive threat detection, and engineer advanced defenses across our cloud, network, and endpoint environments.

Key Responsibilities

• SIEM & SOAR Engineering: Configure log ingestion pipelines, write advanced detection queries, analyze system telemetry, and build automated incident response workflows.
• Policy Technical Enforcement: Directly translate enterprise Information Security Policies into concrete technical controls, including conditional access matrices, complex firewall rule sets, and secure system baselines.
• Data Loss Prevention (DLP) Deployment: Implement, tune, and monitor technical DLP rules to detect, alert on, and block the unauthorized exfiltration of sensitive organizational data.
• Endpoint Detection & Response (EDR) Administration: Deploy and manage global endpoint agents, optimize behavioral alerting thresholds, and execute rapid containment protocols during active threats.
• Vulnerability Management & Internal Pentesting: Execute credentialed infrastructure and application scans, filter false positives, and coordinate patch validations. Conduct targeted internal penetration testing and exploit validation using standard offensive security suites.
• Network Security Mastery: Analyze, configure, and troubleshoot network traffic across Layers 2 through 7 to enforce uncompromised perimeter defense and internal micro‑segmentation.
• Secure Access & Tunneling: Build, harden, and support secure remote access architectures, managing enterprise IPsec / SSL VPN gateways, certificate lifecycles, and Multi‑Factor Authentication (MFA) integrations.
• Technical Mentorship: Act as the primary technical escalation point for IT operations and mentor junior administrators on secure engineering principles and alert triage.

Location and Schedule

• This is a full‑time, office‑based position in a modern, cozy environment in our Troy, MI office.
• Our standard working hours are Monday to Friday, 9:00 AM to 6:00 PM, promoting a healthy work‑life balance.

Skills & Qualifications

• Experience: 5+ years of dedicated, hands‑on experience in cybersecurity engineering, network defense, or security systems administration.
• Systems Proficiency: Deep hands‑on expertise configuring market‑leading SIEM/SOAR platforms, EDR consoles, Data Governance/DLP modules, and enterprise vulnerability scanners.
• Networking & Offensive Skills: Thorough technical understanding of the OSI model, secure tunneling protocols, and practical experience utilizing industry‑standard penetration testing tools to audit internal defenses.
• Certifications: Technical certifications such as CISSP, CASP+, advanced vendor‑specific engineering credentials, or relevant offensive security certifications are strongly preferred.

What We Offer | Career and Culture

• Company Culture: Inclusive, supportive company culture where you are not a number, but a voice that's heard and brings value.
• Growth Path: Defined paid training and clear pathways for career development.
• Benefits: Comprehensive benefits package including PTO, sick days, paid volunteer hours, medical, dental, vision insurance, and 401(k).

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sexual orientation, age, marital status, veteran status, or disability status.

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform crucial job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

AD Mortgage is a broker‑voted Top 5 U.S. wholesale lender, and recognized as a top Non‑QM lender in the U.S. With 20 years in the industry, we offer a full range of loan programs, including DSCR, Bank Statement, FHA, and Conventional loans.