Cybersecurity Analyst

HomeXpress – Your Leading Non-QM Mortgage Lender.Join our growing team and be part of the Top Non-QM Lender in the Business.We are known for closing mortgage loans with speed, ease, and convenience.Licensed in 46 States, we provide brokers with a full suite of mortgage products, including VA, FHA, & FHLMC.If you have a service first mentality and thrive in a fast-paced environment, HomeXpress is the place for you.Join us as we continue to grow and expand our business to the Non-Delegated Correspondent Channel!Job Description Job Title: Cybersecurity Analyst Department: Information TechnologyReports To: VP, Cyber Security and InfrastructureFLSA Status: ExemptManagement: NoSalary Range: $130,000 - $150,000/yr PRIMARY FUNCTIONS:HomeXpress Mortgage is hiring a Cybersecurity Analyst to support day to day security operations in a cloud-first environment. On-site in Santa Ana with hybrid flexibility. Not a remote position. This role owns vulnerability management, security monitoring, email defense, and internal security testing. You will work directly with the VP of Cybersecurity and Infrastructure in a regulated lending environment.This is a hands-on operational role. We are looking for someone reliable, detail-driven, and accountable, who takes ownership of recurring work and escalates early when something is off. ESSENTIAL DUTIES AND RESPONSIBILITIES:Monitor and triage alerts in our SIEM and respond within defined SLAsParticipate in incident response, including containment, investigation, and post-incident reportingBuild and tune detection rules and use cases to reduce false positivesOwn vulnerability management across endpoint, cloud, and automated testing sources, tracking remediation to closureRun the internal and external penetration testing program on schedule and report findingsManage email security tooling and confirm malicious senders are blockedInvestigate user-reported phishing and take corrective actionOperate security awareness phishing simulationsSupport data loss prevention and data security posture monitoringSupport periodic user access reviews and certificationsProduce clear daily and weekly findings summaries for leadershipMaintain documentation and support audit and regulatory requests DESIRED PERSONAL CHARACTERISTICS:Meticulous and committed to the highest quality. Initiative-taker with positive Can-Do attitude. Works well under pressure and relishes the responsibility that comes with the job. Problem solving and analysis. Communication proficiency. An open-minded individual that embraces change and innovation. Team and Project leadership/management experience. Excellent written and verbal communications skills. Possess the knowledge, skills, and ability to operate an advanced cyber analytical toolkit and perform required assessments. Possess expert knowledge of IT and network systems – both on-prem and SaaS. Experience with firewalls and network technologies. Experience installing, configuring, administering software applications. Demonstrated skills in troubleshooting problems with software and hardware. Experience configuring, managing, and maintaining networking equipment. Experience in Vulnerability Alert processes. JOB REQUIREMENTS:4+ years in a security operations or analyst roleHands-on experience with a SIEM platformWorking knowledge of vulnerability management and remediation trackingFamiliarity with cloud identity and Microsoft 365 security toolingStrong written communication and consistent follow-through on recurring tasksAbility to work independently and escalate appropriately EDUCATION:Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field, or equivalent work experience. EXPERIENCE:Experience in a regulated industry, financial services or mortgage a plusFamiliarity with email security, DLP, DSPM, or penetration testing tools PHYSICAL REQUIREMENTS:This position is in an office setting with computer and general office equipment. The position requires the ability to move freely around within the department and other department locations. Additional InformationAll your information will be kept confidential according to EEO guidelines.