{"id":4321790,"url":"https://alion.io/job/tower-loan-senior-infrastructure-security-engineer","title":"Senior Infrastructure Security Engineer","company":{"id":2881883,"name":"Tower Loan","domain":"towerloan.com","url":"https://alion.io/company/towerloan","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Flowood, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Crowdstrike","optional":false},{"name":"FortiGate","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"PCI DSS","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Splunk","optional":false},{"name":"VMWare","optional":false},{"name":"VPN","optional":false},{"name":"Windows Server","optional":false},{"name":"Zero Trust","optional":false},{"name":"Zscaler","optional":false}],"status":"live","first_seen_at":"2026-10-21T00:00:00Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-11-14T20:47:06Z","board_verified":true,"closed_at":null,"days_open":24,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":24},"description":"We take pride in what we do! Deciding to come grow with us is an exciting opportunity to enhance your career success stories. You are the center to what we do. We would love to have you here!\nThe Senior Infrastructure Security Engineer is responsible for designing, implementing, maintaining, and strengthening the security controls that protect Tower Loan’s enterprise infrastructure, networks, systems, and sensitive information. This position serves as a senior technical resource for security engineering, threat detection, incident response, vulnerability management, and identity protection.A strong understanding of enterprise networking, Windows Server, VMware, and on-premises data centers is required to assess risks and protect these environments. The role works closely with infrastructure and network teams, with its primary focus on securing the technology environment.\nDuties/Responsibilities:\nDesign, implement, administer, and continuously improve cybersecurity controls protecting on-premises data centers, branch locations, endpoints, networks, and corporate systems. \nAdminister and optimize security platforms, including Fortinet FortiGate, FortiManager, FortiAnalyzer, CrowdStrike Falcon, Proofpoint, Zscaler, and related technologies. \nConfigure, review, and strengthen firewall policies, intrusion prevention, VPN security, network segmentation, and secure remote access controls. \nMonitor security events, alerts, logs, and threat intelligence to identify suspicious activity, unauthorized access, vulnerabilities, and potential incidents. \nLead technical security investigations and incident response, including threat analysis, containment, remediation, recovery, and root-cause analysis. \nDevelop and maintain endpoint detection and response capabilities, including prevention policies, detection rules, and response procedures. \nManage email security protections, including phishing prevention, malicious attachment detection, email authentication, and data loss prevention. \nStrengthen Microsoft Entra ID and Active Directory security, including multifactor authentication, Conditional Access, privileged access, service accounts, and access control policies. \nConduct vulnerability assessments, evaluate findings, prioritize remediation, and coordinate with infrastructure and application teams to reduce exposure. \nEstablish and maintain system hardening standards and secure configuration baselines for Windows Server, VMware, network devices, and other infrastructure. \nEvaluate network architectures, routing, SD-WAN, VPN connectivity, and segmentation designs to identify weaknesses and recommend security improvements. \nImplement and maintain centralized security logging, monitoring, dashboards, alerting, and event correlation to improve visibility across enterprise systems. \nPerform security assessments of new technologies, infrastructure changes, network configurations, and system implementations. \nSupport ransomware protection, backup security, immutable storage, disaster recovery safeguards, and the security aspects of business continuity planning. \nDevelop automation using PowerShell, Python, or other tools to improve security monitoring, threat detection, and vulnerability remediation. \nSupport PCI DSS, SOC 2, internal security audits, risk assessments, and other applicable regulatory and cybersecurity compliance requirements. \nDevelop and maintain security policies, technical standards, incident response procedures, security diagrams, and supporting documentation. \nCollaborate with infrastructure, network, application development, and support teams to integrate security into technology operations and projects. \nResearch emerging threats, attack techniques, vulnerabilities, and security technologies, recommending practical security improvements. \nServe as a senior technical escalation resource for complex security issues and provide guidance to IT team members on cybersecurity best practices. \nPerform all other duties as assigned. \nRequired Skills/Abilities:\nStrong knowledge of cybersecurity architecture, infrastructure security, network security, and defensive security engineering. \nAdvanced experience with firewalls, intrusion prevention, endpoint security, email security, identity protection, and threat detection. \nStrong understanding of enterprise LAN, WAN, SD-WAN, VPN, routing, switching, segmentation, and common network protocols from a security perspective. \nWorking knowledge of Windows Server, Active Directory, VMware virtualization, enterprise storage, and on-premises data center infrastructure. \nDemonstrated ability to analyze security events, investigate suspicious activity, and coordinate technical incident response and remediation. \nProficiency in vulnerability management, security hardening, risk assessment, and secure configuration practices. \nUnderstanding of SIEM platforms, log analysis, endpoint detection and response, and security automation. \nKnowledge of identity and access management, authentication protocols, privileged access security, and Zero Trust principles. \nStrong analytical, troubleshooting, and problem-solving skills when investigating security issues involving multiple infrastructure components. \nAbility to independently assess technical risks, recommend security controls, and coordinate remediation across technical teams. \nStrong communication and documentation skills, with the ability to explain security risks and recommendations to technical and nontechnical stakeholders. \nAbility to exercise sound judgment and maintain confidentiality when handling sensitive company information and security incidents. \nEducation and Experience:\nBachelor’s degree in Cybersecurity, Computer Science, Information Technology, Network Engineering, or a related field preferred. Equivalent professional experience may be considered. \nFive or more years of progressively responsible experience in cybersecurity engineering, infrastructure security, network security, or related technical roles preferred. \nDemonstrated hands-on experience implementing, administering, and troubleshooting enterprise cybersecurity technologies required. \nExperience with Fortinet security solutions, CrowdStrike Falcon, Proofpoint, Microsoft Entra ID, and Active Directory strongly preferred. \nExperience securing enterprise networks, Windows Server environments, virtualization infrastructure, and on-premises data centers strongly preferred. \nPrior experience leading a cybersecurity team and leading cybersecurity incident response required, including coordinating technical responders and directing containment, remediation, recovery, and post-incident review. \nExperience with vulnerability remediation, endpoint protection, firewall security, and identity security required. \nExperience supporting multi-location organizations, distributed networks, and highly available infrastructure environments preferred. \nExperience in financial services, lending, banking, or another regulated industry preferred. \nFamiliarity with PCI DSS, SOC 2, NIST Cybersecurity Framework, CIS Controls, and enterprise security compliance requirements preferred. \nExperience with Zscaler, Microsoft Defender, Microsoft Sentinel, Splunk, FortiAnalyzer, FortiClient EMS, or similar security platforms preferred. \nFamiliarity with security considerations involving Cohesity, Zerto, Pure Storage, VMware NSX, and related infrastructure technologies beneficial. \nIndustry certifications such as CISSP, Security+, CySA+, GIAC, Fortinet, Microsoft Security, CrowdStrike, or other cybersecurity certifications beneficial but not required. \nPhysical Requirements:\nStand, walk, and/or sit for eight (8) hours a day. \nCommunicate effectively, verbally and in writing, in person, via telephone, or electronically. \nLift and maneuver up to 20 lbs. \nThe above description outlines the most significant job functions performed, but may include other similar functions or assignments not explicitly mentioned.","description_format":"text","description_chars":7975,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Services","Information Security","Consumer Loans & Pawnshops"],"lifecycle":[{"event":"open","at":"2026-11-14T20:47:06Z"}],"visa":[],"liveness":{"score":60,"band":"ok","label":"Likely open","p_open":1,"p_active":0.806,"p_room":0.75,"age_days":24,"expected_fill_days":30,"reasons":["conf:1","win:late","comp:brand"],"computed_at":"2026-11-14T21:47:54Z"},"pay":null,"html_url":"https://alion.io/job/tower-loan-senior-infrastructure-security-engineer","json_url":"https://alion.io/job/tower-loan-senior-infrastructure-security-engineer.json","meta":{"generated_at":"2026-11-14T21:47:54Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":28229,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2881883},"rest":"https://alion.io/mcp/rest/get_company?id=2881883"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftower-loan-senior-infrastructure-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftower-loan-senior-infrastructure-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftower-loan-senior-infrastructure-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/tower-loan-senior-infrastructure-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftower-loan-senior-infrastructure-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4321790}},{"tool":"search_jobs","arguments":{"company":"towerloan.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4321790},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}