Senior Infrastructure Security Engineer

Cybersecurity Jobs; Flowood (MS); On-site; USD 110,000 - 150,000; Full time

Job summary

Tower Loan of Mississippi, LLC is seeking a senior security engineer to protect enterprise infrastructure, networks, systems, and sensitive data on-site in Flowood, MS. You will design, implement, and operate cybersecurity controls across data centers, branch locations, and endpoints, while leading incident response and threat analysis to protect critical assets.

Candidates should have 5+ years of experience, strong knowledge of firewall, identity, and vulnerability management, and hands-on

Qualifications

• Bachelor’s degree in cybersecurity or related field preferred (equivalent experience accepted).
• 5+ years in cybersecurity engineering or related roles.
• Hands-on experience with enterprise cybersecurity technologies in on-prem environments.
• Leading cybersecurity incident response and containment activities.
• Experience with vulnerability remediation, identity security, and firewall protection.

Responsibilities

• Design, administer, and improve cybersecurity controls for data centers, branches, endpoints, and networks.
• Administer and optimize Fortinet FortiGate, FortiManager, FortiAnalyzer, CrowdStrike Falcon, Proofpoint, and Zscaler.
• Configure firewall policies, VPN security, network segmentation, and secure remote access.
• Lead security investigations, threat analysis, containment, remediation, and root-cause analysis.
• Develop automation with PowerShell or Python to improve monitoring and remediation.

Skills

Security architecture

Network security

Firewall management

Endpoint security

Identity & access mgmt

SIEM

Threat detection

Incident response

Education

Bachelor’s degree or equivalent

Tools

Fortinet FortiGate

FortiManager

FortiAnalyzer

CrowdStrike Falcon

Proofpoint

Zscaler

Microsoft Entra ID

Active Directory

Windows Server

VMware

PowerShell

Python

SIEM (Splunk, Defender, etc.)

Job description

Join Tower Loan of Mississippi, LLC onsite in Flowood, MS as a senior security engineer focused on enterprise infrastructure, networks, systems, and sensitive data.

Responsibilities

• Design, implement, administer, and continuously improve cybersecurity controls for on-premises data centers, branch locations, endpoints, networks, and corporate systems
• Administer and optimize security platforms, including Fortinet FortiGate, FortiManager, FortiAnalyzer, CrowdStrike Falcon, Proofpoint, Zscaler, and related technologies
• Configure and strengthen firewall policies, intrusion prevention, VPN security, network segmentation, and secure remote access controls
• Monitor security events, alerts, logs, and threat intelligence to detect suspicious activity, unauthorized access, vulnerabilities, and potential incidents
• Lead technical security investigations and incident response, including threat analysis, containment, remediation, recovery, and root-cause analysis
• Develop and maintain endpoint detection and response capabilities, including prevention policies, detection rules, and response procedures
• Manage email security protections, including phishing prevention, malicious attachment detection, email authentication, and data loss prevention
• Strengthen Microsoft Entra ID and Active Directory security, including multifactor authentication, Conditional Access, privileged access, service accounts, and access control policies
• Conduct vulnerability assessments, evaluate findings, prioritize remediation, and coordinate with infrastructure and application teams to reduce exposure
• Establish and maintain system hardening standards and secure configuration baselines for Windows Server, VMware, network devices, and other infrastructure
• Evaluate network architectures, routing, SD-WAN, VPN connectivity, and segmentation designs to identify weaknesses and recommend security improvements
• Implement and maintain centralized security logging, monitoring, dashboards, alerting, and event correlation to improve enterprise visibility
• Perform security assessments of new technologies, infrastructure changes, network configurations, and system implementations
• Support ransomware protection, backup security, immutable storage, disaster recovery safeguards, and security aspects of business continuity planning
• Develop automation using PowerShell, Python, or other tools to improve monitoring, threat detection, and vulnerability remediation
• Support PCI DSS, SOC 2, internal security audits, risk assessments, and other applicable regulatory and cybersecurity compliance requirements
• Develop and maintain security policies, technical standards, incident response procedures, security diagrams, and supporting documentation
• Collaborate with infrastructure, network, application development, and support teams to integrate security into operations and projects
• Research emerging threats, attack techniques, vulnerabilities, and security technologies, recommending practical improvements
• Serve as a senior technical escalation resource for complex security issues and provide guidance to IT team members
• Perform all other duties as assigned

Requirements

• 5+ years of progressively responsible experience in cybersecurity engineering, infrastructure security, network security, or related technical roles
• Strong knowledge of cybersecurity architecture, infrastructure security, network security, and defensive security engineering
• Advanced experience with firewalls, intrusion prevention, endpoint security, email security, identity protection, and threat detection
• Strong understanding of enterprise LAN, WAN, SD-WAN, VPN, routing, switching, segmentation, and common network protocols from a security perspective
• Working knowledge of Windows Server, Active Directory, VMware virtualization, enterprise storage, and on-premises data center infrastructure
• Demonstrated ability to analyze security events, investigate suspicious activity, and coordinate technical incident response and remediation
• Proficiency in vulnerability management, security hardening, risk assessment, and secure configuration practices
• Understanding of SIEM platforms, log analysis, endpoint detection and response, and security automation
• Knowledge of identity and access management, authentication protocols, privileged access security, and Zero Trust principles
• Strong analytical, troubleshooting, and problem-solving skills across multiple infrastructure components
• Ability to independently assess technical risks, recommend security controls, and coordinate remediation across technical teams
• Strong communication and documentation skills for technical and nontechnical stakeholders
• Ability to exercise sound judgment and maintain confidentiality when handling sensitive company information and security incidents

Education & Experience

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Network Engineering, or a related field preferred (equivalent professional experience may be considered)
• Hands-on experience implementing, administering, and troubleshooting enterprise cybersecurity technologies required
• Experience securing enterprise networks, Windows Server environments, virtualization infrastructure, and on-premises data centers strongly preferred
• Leading cybersecurity incident response required, including coordinating technical responders and directing containment, remediation, recovery, and post-incident review
• Experience with vulnerability remediation, endpoint protection, firewall security, and identity security required
• Industry certifications such as CISSP, Security+, CySA+, GIAC, Fortinet, Microsoft Security, CrowdStrike, or other cybersecurity certifications beneficial but not required

Technologies

• Fortinet FortiGate, Fortinet FortiManager, Fortinet FortiAnalyzer, Fortinet FortiAnalyzer
• CrowdStrike Falcon
• Proofpoint
• Zscaler
• Microsoft Entra ID, Active Directory
• Windows Server, VMware, VMware NSX
• PowerShell, Python
• SIEM platforms, Microsoft Defender, Microsoft Sentinel, Splunk
• PCI DSS, SOC 2
• NIST Cybersecurity Framework, CIS Controls
• FortiClient EMS
• Cohesity, Zerto, Pure Storage

Physical Requirements

• Stand, walk, and/or sit for eight (8) hours a day
• Communicate effectively, verbally and in writing, in person, via telephone, or electronically
• Lift and maneuver up to 20 lbs