Senior Infrastructure Security Engineer

Join Tower Loan’s team in Flowood, MS to design and operate enterprise infrastructure security across networks, systems, endpoints, and sensitive data.

Responsibilities

• Design, implement, administer, and continuously improve cybersecurity controls for on-premises data centers, branch locations, endpoints, networks, and corporate systems.
• Administer and optimize security platforms, including Fortinet FortiGate, FortiManager, FortiAnalyzer, CrowdStrike Falcon, Proofpoint, Zscaler, and related technologies.
• Configure, review, and strengthen firewall policies, intrusion prevention, VPN security, network segmentation, and secure remote access controls.
• Monitor security events, alerts, logs, and threat intelligence to identify suspicious activity, unauthorized access, vulnerabilities, and potential incidents.
• Lead technical security investigations and incident response, including threat analysis, containment, remediation, recovery, and root-cause analysis.
• Develop and maintain endpoint detection and response capabilities, including prevention policies, detection rules, and response procedures.
• Manage email security protections, including phishing prevention, malicious attachment detection, email authentication, and data loss prevention.
• Strengthen Microsoft Entra ID and Active Directory security, including multifactor authentication, Conditional Access, privileged access, service accounts, and access control policies.
• Conduct vulnerability assessments, evaluate findings, prioritize remediation, and coordinate with infrastructure and application teams to reduce exposure.
• Establish and maintain system hardening standards and secure configuration baselines for Windows Server, VMware, network devices, and other infrastructure.
• Evaluate network architectures, routing, SD-WAN, VPN connectivity, and segmentation designs to identify weaknesses and recommend security improvements.
• Implement and maintain centralized security logging, monitoring, dashboards, alerting, and event correlation to improve enterprise visibility.
• Perform security assessments of new technologies, infrastructure changes, network configurations, and system implementations.
• Support ransomware protection and backup security, including immutable storage and disaster recovery safeguards aligned to business continuity planning.
• Develop automation using PowerShell, Python, or other tools to improve security monitoring, threat detection, and vulnerability remediation.
• Support PCI DSS, SOC 2, internal security audits, risk assessments, and other applicable regulatory and cybersecurity compliance requirements.
• Develop and maintain security policies, technical standards, incident response procedures, security diagrams, and supporting documentation.
• Collaborate with infrastructure, network, application development, and support teams to integrate security into technology operations and projects.
• Research emerging threats, attack techniques, vulnerabilities, and security technologies, recommending practical security improvements.
• Serve as a senior technical escalation resource for complex security issues and provide guidance to IT team members on cybersecurity best practices.
• Perform all other duties as assigned.

Requirements

• 5+ years of progressively responsible experience in cybersecurity engineering, infrastructure security, network security, or related technical roles.
• Strong knowledge of cybersecurity architecture, infrastructure security, network security, and defensive security engineering.
• Advanced experience with firewalls, intrusion prevention, endpoint security, email security, identity protection, and threat detection.
• Strong understanding of enterprise LAN, WAN, SD-WAN, VPN, routing, switching, segmentation, and common network protocols from a security perspective.
• Working knowledge of Windows Server, Active Directory, VMware virtualization, enterprise storage, and on-premises data center infrastructure.
• Demonstrated ability to analyze security events, investigate suspicious activity, and coordinate technical incident response and remediation.
• Proficiency in vulnerability management, security hardening, risk assessment, and secure configuration practices.
• Understanding of SIEM platforms, log analysis, endpoint detection and response, and security automation.
• Knowledge of identity and access management, authentication protocols, privileged access security, and Zero Trust principles.
• Strong analytical, troubleshooting, and problem-solving skills for security investigations across multiple infrastructure components.
• Ability to independently assess technical risks, recommend security controls, and coordinate remediation across technical teams.
• Strong communication and documentation skills to explain security risks and recommendations to technical and nontechnical stakeholders.
• Ability to exercise sound judgment and maintain confidentiality when handling sensitive company information and security incidents.

Technologies

• Fortinet FortiGate, Fortinet FortiManager, Fortinet FortiAnalyzer
• CrowdStrike Falcon
• Proofpoint
• Zscaler
• Microsoft Entra ID, Active Directory
• Windows Server
• VMware, VMware NSX
• PowerShell, Python
• SIEM platforms, Microsoft Defender, Microsoft Sentinel, Splunk
• PCI DSS, SOC 2
• NIST Cybersecurity Framework, CIS Controls
• FortiAnalyzer, FortiClient EMS
• Cohesity, Zerto, Pure Storage

Education and Experience

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Network Engineering, or a related field preferred; equivalent professional experience may be considered.
• Five or more years of progressively responsible experience in cybersecurity engineering, infrastructure security, network security, or related technical roles preferred.
• Demonstrated hands-on experience implementing, administering, and troubleshooting enterprise cybersecurity technologies required.
• Experience with Fortinet security solutions, CrowdStrike Falcon, Proofpoint, Microsoft Entra ID, and Active Directory strongly preferred.
• Experience securing enterprise networks, Windows Server environments, virtualization infrastructure, and on-premises data centers strongly preferred.
• Prior experience leading a cybersecurity team and incident response required, including coordinating technical responders and directing containment, remediation, recovery, and post-incident review.
• Experience with vulnerability remediation, endpoint protection, firewall security, and identity security required.
• Industry certifications such as CISSP, Security+, CySA+, GIAC, Fortinet, Microsoft Security, CrowdStrike, or other cybersecurity certifications beneficial but not required.

Physical Requirements

• Stand, walk, and/or sit for eight (8) hours a day.
• Communicate effectively, verbally and in writing, in person, via telephone, or electronically.
• Lift and maneuver up to 20 lbs.