Senior IT Security Analyst

Job not on LinkedIn

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Receive Emails For Remote Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Guild Mortgage

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1960

💸 Finance

🏠 Real Estate

Finance • Real Estate

Guild Mortgage is a U. S. -based mortgage lender and loan servicer that provides a wide range of home financing products and services to consumers and business partners. The company offers purchase and refinance mortgages, including conventional, FHA, VA, USDA, jumbo, renovation, construction, reverse mortgages, HELOCs, and specialty programs and down-payment assistance. Guild Mortgage operates nationwide through local branches and loan officers, supports borrowers with servicing and online account management, and partners with builders, real estate agents, title agents, and correspondents.

📋 Description

• Serves as the first line of security alert escalation and guidance for IT Security Analysts. • Performs essential duties with minimal supervision for one or multiple areas of the IT Security Program such as vulnerability management, security awareness, threat intelligence, etc. • Monitor data activity and investigate alerts related to data exfiltration, inappropriate access, and policy violations. • Investigate security incidents involving sensitive data, including unauthorized access and data leakage. • Partner with the Incident Response team to contain, remediate, and document data-related incidents. • Develop and maintain runbooks for data protection incident handling and escalation. • Works closely with IT Security Engineers to draft runbooks, tune alerts, collaborate on escalations, and generate ideas for new alerting. • Acts as lead for small projects by IT Security Manager and/or Director as needed. • Conducts network monitoring and intrusion detection analysis using various computer network defense tools, such as intrusion detection/prevention systems, firewalls, and host-based security systems. • Conducts log-based and endpoint-based threat detection to detect and protect against threats coming from multiple sources. • Deploys cloud-centric detection to detect threats related to cloud environments and services used by the organization. • Correlates activity across assets (endpoint, network, apps) and environments (on-premises, cloud) to identify patterns of anomalous activity. • Reviews alerts and data from sensors, and documents formal, technical incident reports. • Works with threat intelligence and/or threat-hunting teams. • Provides network subscribers with incident response support, including mitigating actions to contain activity and facilitating forensics analysis when necessary. • Works with security information and event management (SIEM) to manage/tune the system, create/manage the detection content and actively watch for alerts. • Correlates network, cloud, and endpoint activity across environments to identify attacks and unauthorized use. • Researches emerging threats and vulnerabilities to aid in the identification of incidents. • Supports network vulnerability scans, security audits, and risk assessments and provides feedback to ensure compliance with corporate security policies and adherence to industry best practices. • Provides users with incident response support, including mitigating actions to contain activity, and facilitating forensics analysis when necessary. • Performs security standards testing against computers before implementation to ensure security.

🎯 Requirements

• A combination of education and experience may be considered in lieu of the Bachelor’s degree. • Minimum four years' experience in IT Audit and/or Enterprise Risk Management, or as a Penetration Tester, Red Team/Incident Responder, Junior Security Operations Analyst, Security Coordinator and/or related required. • Certifications are highly desired such as: Security+, SSCP, CISSP or other IT security certifications. • Familiarity with risk assessment and risk management concepts or processes. • Working knowledge of various regulatory security requirements – particularly Sarbanes-Oxley (SOX), GLBA, and CCPA. • Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one. • Ability to effectively influence others to modify their opinions, plans, or behaviors. • Good understanding of organizational mission, values, goals, and consistent application of this knowledge. • Strong problem-solving and troubleshooting skills. • Ability to collaborate and maintain a working relationship with stakeholders at all levels and roles in the company. • Excellent verbal and written communication skills required. • Highly organized and detail-oriented; ability to work in a fast-paced, metrics-driven environment required. • Proficiency in Microsoft Office Suite, Word, Excel, Wiki, collaborative cloud-based programs, and third-party software applications required.

🏖️ Benefits

• medical • dental • vision • life insurance • AD&D • LTD • 401(k) with employer match