Sr. InfoSec Systems Engineer (Azure Cloud)

About the role

loanDepot is actively looking for an experienced Senior Information Security Systems Engineer to join our Cyber Security Practice. The Sr. Information Security Systems Engineer is responsible for guiding the implementation and monitoring of enterprise wide threat and vulnerability management solutions for loanDepot Enterprise systems.

Responsibilities

• Configure resources to detect vulnerabilities to operating systems, applications, databases and the network infrastructure components.
• Detect, enumerate and classify major vulnerabilities, perform trend analysis and reporting for the Enterprise through the use of vulnerability assessment tools and methodologies.
• Evaluate the results from intrusion detection devices used for monitoring and reporting of network traffic for analysis of unwanted manipulation to systems, malicious network traffic, network attacks against vulnerable services, data driven attacks on applications, host based attacks or unauthorized access to sensitive data.
• Schedule and maintain security operations management of operating systems, security applications and network infrastructure components. Provide security configurations, controls for monitoring and centralized logging for network and server devices.
• Cook up coordination resources for auditing of applications, operating systems and networks to provide a measurable technical assessment that includes, performing security vulnerability scans, reviewing access controls and analysis to ensure availability, confidentiality and integrity to help the organization meet internal and external regulatory compliance.
• Have the ability to formulate and interpret penetration test information results for the enterprise. Manage vulnerability detection, analysis and exploitation remediation to ensure confidentiality, integrity and availability of mission critical information assets.
• Mentor junior engineers in security knowledge and experience in technologies and methodologies as it relates to Security Information and Event Management (SIEM) devices, firewalls, proxies, access controls, encryption, networking, scripting, auditing, vulnerability assessments, intrusion management and operations. Additionally to assist with effective research, data gathering, analysis, metrics reporting and communications.
• Provide guidance using specialized knowledge and toolsets to operational teams during enterprise wide crisis scenarios outside of the routine change management process or production scope.
• Formulate and interpret penetration test information results for the enterprise. Manage vulnerability detection, analysis, and exploitation remediation to ensure confidentiality, integrity, and availability of mission critical information assets.
• Provide guidance using specialized knowledge and toolsets to operational teams during enterprise wide crisis scenarios outside of the routine change management process or production scope.

Requirements

• Proven experience with Azure Cloud-based security engineering and hands-on implementation on security technologies
• Strong knowledge of Azure services, including VMs, Azure SQL Database, Azure Functions, and Azure Networking (Required)
• Demonstrates knowledge of, adherence to, monitoring and responsibility for compliance with state and federal regulations and laws as they pertain to this position
• Demonstrates comprehensive understanding of security methodologies
• Demonstrates comprehensive knowledge of networking components (routers, switches, load balancers, wireless access points); client/server relationships; relational databases and structured query language; encryption algorithms and ciphers (PKI/SSL); malicious code (works, viruses spyware, etc.); Virtual Private Networking; and multi-tier environments).
• Comprehensive understanding of Security Methodologies
• Experience with reverse engineering of malware
• Advanced experience with TCPIP/UDP/ICMP
• Comprehensive knowledge of the OSI Reference Model
• Windows / Linux / Unix operating systems
• Advanced experience with networking components (routers, switches, load balancers, wireless access points, etc.).
• Comprehensive knowledge of firewalls, proxies, mail servers and web servers
• Advanced experience with operational support for operating systems, applications and networks
• Comprehensive knowledge of client/server relationships
• Comprehensive knowledge of relational databases and structured query language
• Advanced experience with vulnerability assessments
• Advanced experience with intrusion management and its components
• Comprehensive understanding of encryption algorithms and ciphers (PKI/SSL)
• Comprehensive knowledge of malicious code (worms, viruses, spyware, etc.)
• Comprehensive experience with Virtual Private Networking
• Comprehensive knowledge of multi-tier environment
• Advanced experience with packet inspection / sniffers
• Advanced experience in forensics and e-discovery
• Advanced experience in automation and scripting of applications and systems
• Advanced experience in anomaly detection (signature / behavioral)
• Advanced experience with event and log correlation
• Effective team management, time management, and organizational skills
• Effective written and verbal communication skills
• Effective analytical and problem solving skills
• Proficient in Microsoft Office Suite products

Qualifications

• Bachelor’s Degree in Information Technology, Mathematics, Business, Engineering or related fields with 5-7 years of professional experience.

Preferred Certifications

• CISSP
• GIAC
• CRISC
• CEH