Cyber Security Analyst, SecOps

Join the company defining what it means to be an Impact Lender!

Mortgages are what we do, but that doesn't define who we are. In 2008, Movement disrupted the industry with the innovative 6-7-1 mortgage process. In 2023, we pioneered again, helping launch Impact Lending - a new category of lending. Any mortgage lender that commits at least 10% of its profits to helping the neighborhoods it serves is an Impact Lender.

At Movement, we are Impact Lenders. We give 40%-50% of our profits to making an impact in our communities. For us, purpose and people have always come before profit.

Movement is changing the financial services industry through innovation and a new philosophy for serving loan officers, home buyers, and the communities where they live.

As the sixth-largest retail mortgage lender in the U.S., Movement’s size and scale offer an ideal environment to transform its industry while still offering the speed, flexibility, and DNA of a startup. Movement is privately held and investing capital in strategic transformation for the long-term. Our team is building digital ecosystems used by thousands of loan originators, realtors, and borrowers designed to increase customer acquisition, improve productivity, and accelerate the delivery of products across every channel. Movement funds more than $30 billion in mortgages each year, helping improve homeownership rates and close the wealth gap for hundreds of thousands of families. Beyond that, we’ve invested $260 million of our profit in the nonprofit Movement Foundation to build schools and community centers in developing communities.

Reducing friction and helping simplify the mortgage process is only one part of the puzzle for our customers. As Movement grows, we are taking a consumer-first approach and seeking to remove friction and add transparency to all aspects of the home buying process. Getting a mortgage is but one step along a journey of additionally required services-each with its own supplemental experience. Our team will build systems that unify this ecosystem into a seamless, referable experience for consumers.

We’re looking for team members whose curiosity and drive will propel this next-generation experience.

As the Cyber Security Analyst, SecOps, you’ll be responsible for maintaining the technical IT cyber security capabilities necessary for safeguarding the firm's critical information systems and business applications.

How You’ll Contribute:

• Support the development and management of security operations and data security, based on NIST Cyber Security Framework, NIST 800-53, and CIS controls.
• Work closely with the IT infrastructure and compliance team to ensure key cybersecurity risks and issues are identified, addressed, and resolved in a timely manner.
• Participate in application security, vulnerability management, system administration, configuration, monitoring, detection, and patch management activities.
• Provide technical support and administration network and cloud-based security tools
• Assist with the administration, detection, monitoring, and reporting function within Cyber Security Operations
• Participate in incident response activities, change management, operations support, metrics, and reporting.
• Act as an incident responder by executing response plans and coordinating activity as needed
• Administrate Privileged Access Management (PAM) strategies and technologies for exerting control over the elevated (“privileged”) access and permissions for users, accounts, processes, and systems across an IT environment.
• Assist with the development of cyber security incident response “playbooks” and documentation for the team

Who You Are:

• 5 years of Cybersecurity experience
• Experience in networking and network security
• Experience working within a structured security framework, such as NIST CSF, NIST 800-53, CIS, or ISO 27001
• Knowledge of network security, conducting vulnerability assessments, and implementation including testing security controls
• Excellent interpersonal skills, comfortable working at all levels within an organization and in a wide variety of situations
• An ability to translate security requirements and standards into easily understood business concepts and vice versa
• Relevant experience in incident response, detection, containment, and monitoring
• Relevant industry certification (e.g., Security+)
• Work independently and have excellent communication skills
• Ability to administrate and support security and data protection best practices
• Understanding of network security, threat intelligence, and network security controls

Bonus Points!

• Recent experience of working in a similar capacity, preferably in a financial services organization
• Cyber security leadership
• Experience with ServiceNow ticketing system
• Experience with SIEM, EDR/XDR/MDR platforms

The expected salary range for this position is between:

The range for the position in other geographies may vary based on market differences. The actual compensation will be determined based on experience and other factors permitted by law.

We also offer a benefits package that includes:

• Competitive pay

• Benefits Offered: Medical, Dental, Vision, Life, Disability, Critical Care, Hospitalization, HSA, FSA, DCFSA and QTE

• Retirement plan: 401(k) and Roth

• Paid Time Off: 16 days front loaded. Prorated based on the start date month

• 11.5 paid holidays per year

• Employee assistance program

• Excellent career growth opportunity

• Fun, team-focused working environment

• Employee driven community outreach program

• Relocation packages available

The application window is anticipated to close on:

We’re definitely not your average mortgage company. When you’re ready to grow your career AND your impact, we’re ready for you. We’re also one of the nation’s top lenders and are redefining corporate culture. We work hard, we have fun, we invest in our people and we make a difference. Sound like a plan? Good. Learn more at www.movement.com.