Senior Security Engineer

Neighborhood Loans seeks a hands-on Senior Security Engineer to reinforce controls across cloud, application, network, and email security within a regulated mortgage lending environment. This role reports to the Chief Information Officer and operates in a hybrid capacity based in Downers Grove, Illinois.

Responsibilities

• Harden and maintain the security configuration of the Azure and Microsoft 365 environment, including Entra ID, Conditional Access, network controls, and Key Vault.
• Define and operate the application security program, incorporating SAST, DAST, software composition analysis, and security checks integrated into the CI/CD pipeline.
• Administer and tune Mimecast based email security and anti-phishing controls, including policy configuration and handling of delivered threats.
• Author and maintain security policies, standards, and supporting documentation to support SOC 2 readiness and ongoing compliance efforts.
• Support detection and incident response activities in coordination with the organization’s managed detection and response provider.
• Contribute to third-party and vendor risk reviews and to GLBA Safeguards Rule compliance activities.

Requirements

• At least seven years of information security experience with hands-on work securing and operating enterprise environments.
• Strong expertise with Azure and Microsoft security technologies, including Entra ID, Conditional Access, Key Vault, and identity management.
• Proven experience with application security and secure-SDLC tooling (SAST, DAST, and software composition analysis) and CI/CD security integration.
• Experience administering endpoint protection and managed detection and response services such as Bitdefender and secure email gateways like Mimecast.
• Excellent written communication skills, with the ability to author security policies, standards, and operational documentation.
• Experience in regulated industries (financial services, mortgage, or banking) with familiarity with frameworks such as NIST, GLBA, PCI, or HIPAA.
• Judgment to prioritize and tailor security controls to the organization’s risk profile.

Technologies

• Azure
• Microsoft 365
• Entra ID
• Conditional Access
• Key Vault
• Mimecast
• Bitdefender
• SAST
• DAST
• Software composition analysis
• Encompass
• PowerShell
• Python
• Bicep
• Terraform
• EDR
• MDR
• NIST
• GLBA
• PCI
• HIPAA

Benefits

• 401(k)
• Dental insurance
• Health insurance
• Paid time off
• Vision insurance

Pay

From USD 120,000 per year

Application Question(s)

• Do you have mortgage or fintech industry experience, including experience with Encompass or other loan origination systems?

Experience

• Information security: 5 years (Preferred)

Work Location

Hybrid remote in Downers Grove, IL 60515

Job Type / Additional Information

• Full-Time
• Primarily Remote / Chicagoland area candidates preferred
• Reports to Chief Information Officer

About Us

At Neighborhood Loans we are dedicated mortgage lending professionals focused on making clients our priority. As a residential mortgage lender, we educate and empower consumers in a rapidly evolving market. Our mission centers on delivering exceptional service grounded in ethics, values, and customer care, with the aim of earning the loyalty and trust of homeowners who become lifelong clients and friends.