Senior Infrastructure Security Engineer

Tower Loan of Mississippi, LLC; United States; A distancia; USD 110.000 - 160.000; Jornada completa

Descripción de la vacante

Tower Loan of Mississippi, LLC is seeking a Senior Infrastructure Security Engineer to design, implement, and strengthen security controls across enterprise infrastructure, networks, and data centers. The role requires expertise in Windows Server, VMware, Fortinet, CrowdStrike, and Active Directory, with leadership in incident response, vulnerability management, and threat detection.

You will work with infrastructure teams to embed security into technology projects and ensure compliance with PCI

Formación

• Bachelor’s degree in Cybersecurity or related field; equivalent experience considered.
• 5+ years in cybersecurity engineering or infrastructure security.
• Hands-on with Fortinet, CrowdStrike, Proofpoint, and AD/Entra ID.
• Experience securing enterprise networks and on‑prem data centers.

Responsabilidades

• Design and administer cybersecurity controls for on‑prem data centers and networks.
• Configure firewall policies, IPS, VPN security, and network segmentation.
• Lead security investigations, incident response, and root-cause analysis.
• Develop endpoint protection, EDR, and email security measures.
• Collaborate with IT teams to integrate security into operations.

Conocimientos

Cybersecurity architecture

Firewall security

Threat detection

Incident response

Vulnerability management

PowerShell/Python

Zero Trust

Educación

Bachelor’s degree in Cybersecurity

Equivalent professional experience

Herramientas

Fortinet FortiGate

FortiManager

FortiAnalyzer

CrowdStrike Falcon

Proofpoint

Zscaler

Active Directory

Microsoft Entra ID

SIEM

Descripción del empleo

We take pride in what we do! Deciding to come grow with us is an exciting opportunity to enhance your career success stories. You are the center to what we do. We would love to have you here! The Senior Infrastructure Security Engineer is responsible for designing, implementing, maintaining, and strengthening the security controls that protect Tower Loan’s enterprise infrastructure, networks, systems, and sensitive information. This position serves as a senior technical resource for security engineering, threat detection, incident response, vulnerability management, and identity protection. A strong understanding of enterprise networking, Windows Server, VMware, and on-premises data centers is required to assess risks and protect these environments. The role works closely with infrastructure and network teams, with its primary focus on securing the technology environment.

Duties/Responsibilities:

• Design, implement, administer, and continuously improve cybersecurity controls protecting on-premises data centers, branch locations, endpoints, networks, and corporate systems.
• Administer and optimize security platforms, including Fortinet FortiGate, FortiManager, FortiAnalyzer, CrowdStrike Falcon, Proofpoint, Zscaler, and related technologies.
• Configure, review, and strengthen firewall policies, intrusion prevention, VPN security, network segmentation, and secure remote access controls.
• Monitor security events, alerts, logs, and threat intelligence to identify suspicious activity, unauthorized access, vulnerabilities, and potential incidents.
• Lead technical security investigations and incident response, including threat analysis, containment, remediation, recovery, and root-cause analysis.
• Develop and maintain endpoint detection and response capabilities, including prevention policies, detection rules, and response procedures.
• Manage email security protections, including phishing prevention, malicious attachment detection, email authentication, and data loss prevention.
• Strengthen Microsoft Entra ID and Active Directory security, including multifactor authentication, Conditional Access, privileged access, service accounts, and access control policies.
• Conduct vulnerability assessments, evaluate findings, prioritize remediation, and coordinate with infrastructure and application teams to reduce exposure.
• Establish and maintain system hardening standards and secure configuration baselines for Windows Server, VMware, network devices, and other infrastructure.
• Evaluate network architectures, routing, SD-WAN, VPN connectivity, and segmentation designs to identify weaknesses and recommend security improvements.
• Implement and maintain centralized security logging, monitoring, dashboards, alerting, and event correlation to improve visibility across enterprise systems.
• Perform security assessments of new technologies, infrastructure changes, network configurations, and system implementations.
• Support ransomware protection, backup security, immutable storage, disaster recovery safeguards, and the security aspects of business continuity planning.
• Develop automation using PowerShell, Python, or other tools to improve security monitoring, threat detection, and vulnerability remediation.
• Support PCI DSS, SOC 2, internal security audits, risk assessments, and other applicable regulatory and cybersecurity compliance requirements.
• Develop and maintain security policies, technical standards, incident response procedures, security diagrams, and supporting documentation.
• Collaborate with infrastructure, network, application development, and support teams to integrate security into technology operations and projects.
• Research emerging threats, attack techniques, vulnerabilities, and security technologies, recommending practical security improvements.
• Serve as a senior technical escalation resource for complex security issues and provide guidance to IT team members on cybersecurity best practices.
• Perform all other duties as assigned.

Required Skills/Abilities:

• Strong knowledge of cybersecurity architecture, infrastructure security, network security, and defensive security engineering.
• Advanced experience with firewalls, intrusion prevention, endpoint security, email security, identity protection, and threat detection.
• Strong understanding of enterprise LAN, WAN, SD-WAN, VPN, routing, switching, segmentation, and common network protocols from a security perspective.
• Working knowledge of Windows Server, Active Directory, VMware virtualization, enterprise storage, and on-premises data center infrastructure.
• Demonstrated ability to analyze security events, investigate suspicious activity, and coordinate technical incident response and remediation.
• Proficiency in vulnerability management, security hardening, risk assessment, and secure configuration practices.
• Understanding of SIEM platforms, log analysis, endpoint detection and response, and security automation.
• Knowledge of identity and access management, authentication protocols, privileged access security, and Zero Trust principles.
• Strong analytical, troubleshooting, and problem-solving skills when investigating security issues involving multiple infrastructure components.
• Ability to independently assess technical risks, recommend security controls, and coordinate remediation across technical teams.
• Strong communication and documentation skills, with the ability to explain security risks and recommendations to technical and nontechnical stakeholders.
• Ability to exercise sound judgment and maintain confidentiality when handling sensitive company information and security incidents.

Education and Experience:

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Network Engineering, or a related field preferred.
• Equivalent professional experience may be considered.
• Five or more years of progressively responsible experience in cybersecurity engineering, infrastructure security, network security, or related technical roles preferred.
• Demonstrated hands‑on experience implementing, administering, and troubleshooting enterprise cybersecurity technologies required.
• Experience with Fortinet security solutions, CrowdStrike Falcon, Proofpoint, Microsoft Entra ID, and Active Directory strongly preferred.
• Experience securing enterprise networks, Windows Server environments, virtualization infrastructure, and on‑premises data centers strongly preferred.
• Prior experience leading a cybersecurity team and leading cybersecurity incident response required, including coordinating technical responders and directing containment, remediation, recovery, and post‑incident review.
• Experience with vulnerability remediation, endpoint protection, firewall security, and identity security required.
• Experience supporting multi‑location organizations, distributed networks, and highly available infrastructure environments preferred.
• Experience in financial services, lending, banking, or another regulated industry preferred.
• Familiarity with PCI DSS, SOC 2, NIST Cybersecurity Framework, CIS Controls, and enterprise security compliance requirements preferred.
• Experience with Zscaler, Microsoft Defender, Microsoft Sentinel, Splunk, FortiAnalyzer, FortiClient EMS, or similar security platforms preferred.
• Familiarity with security considerations involving Cohesity, Zerto, Pure Storage, VMware NSX, and related infrastructure technologies beneficial.
• Industry certifications such as CISSP, Security+, CySA+, GIAC, Fortinet, Microsoft Security, CrowdStrike, or other cybersecurity certifications beneficial but not required.

Physical Requirements:

• Stand, walk, and/or sit for eight (8) hours a day.
• Communicate effectively, verbally and in writing, in person, via telephone, or electronically.
• Lift and maneuver up to 20 lbs.

With over 260 locations across 8 states, our team builds strong customer relationships by offering personalized financial solutions in person, by phone, and online. We're dedicated to our communities, foster employee growth, and offer clear career paths through internal promotion.

Established since 1936, Tower Loan is proud to be one of America’s largest privately owned consumer finance companies, operating more than 260 office locations across eight states. We are dedicated to building strong customer relationships by providing personalized financial solutions and are deeply committed to serving our communities. We foster a culture of growth and development for our employees, with a strong promote-from-within philosophy. For decades, Tower Loan has empowered our customers and team members to build brighter futures.