Cyber Security Analyst-Security Operations

Movement is changing the financial services industry through innovation and a new philosophy for serving loan officers, home buyers, and the communities where they live.

As the sixth-largest retail mortgage lender in the U.S., Movement’s size and scale offer an ideal environment to transform its industry while still offering the speed, flexibility, and DNA of a startup. Movement is privately held and investing capital in strategic transformation for the long-term. Our team is building digital ecosystems used by thousands of loan originators, realtors, and borrowers designed to increase customer acquisition, improve productivity, and accelerate the delivery of products across every channel. Movement funds more than $30 billion in mortgages each year, helping improve homeownership rates and close the wealth gap for hundreds of thousands of families. Beyond that, we’ve invested $260 million of our profit in the nonprofit Movement Foundation to build schools and community centers in developing communities.

Reducing friction and helping simplify the mortgage process is only one part of the puzzle for our customers. As Movement grows, we are taking a consumer-first approach and seeking to remove friction and add transparency to all aspects of the home buying process. Getting a mortgage is but one step along a journey of additionally required services—each with its own supplemental experience. Our team will build systems that unify this ecosystem into a seamless, referable experience for consumers.

We27re looking for team members whose curiosity and drive will propel this next-generation experience.

As the Cyber Security Analyst-SecOps, you27ll be responsible for maintaining the technical IT cyber security capabilities necessary for safeguarding the firm27s critical information systems and business applications.

Duties & Responsibilities:

• Support the development and management of security operations and data security, based on NIST Cyber Security Framework, NIST 800-53, and CIS controls.

• Work closely with the IT infrastructure and compliance team to ensure key cybersecurity risks and issues are identified, addressed, and resolved in a timely manner.

• Participate in application security, vulnerability management, system administration, configuration, monitoring, detection, and patch management activities.

• Provide technical support and administration network and cloud-based security tools

• Assist with the administration, detection, monitoring, and reporting function within Cyber Security Operations

• Participate in incident response activities, change management, operations support, metrics, and reporting.

• Act as an incident responder by executing response plans and coordinating activity as needed

• Administrate Privileged Access Management (PAM) strategies and technologies for exerting control over the elevated (22privileged22) access and permissions for users, accounts, processes, and systems across an IT environment.

• Assist with the development of cyber security incident response 22playbooks22 and documentation for the team

Basic Qualifications:

• 2 year of Cybersecurity experience

• Experience in networking and network security

• Experience working within a structured security framework, such as NIST CSF, NIST 800-53, CIS, or ISO 27001

• Knowledge of network security, conducting vulnerability assessments, and implementation including testing security controls

• Excellent interpersonal skills, comfortable working at all levels within an organization and in a wide variety of situations

• An ability to translate security requirements and standards into easily understood business concepts and vice versa

• Relevant experience in incident response, detection, containment, and monitoring

• Relevant industry certification (e.g., Security+)

• Work independently and have excellent communication skills

• Ability to administrate and support security and data protection best practices

• Understanding of network security, threat intelligence, and network security controls

Preferred Qualifications:

• Recent experience of working in a similar capacity, preferably in a financial services organization

• Cyber security leadership

• Experience with ticketing system

• Experience with SIEM, EDR/XDR/MDR platforms

The expected salary range for this position is between:

The range for the position in other geographies may vary based on market differences. The actual compensation will be determined based on experience and other factors permitted by law.

We also offer a benefits package that includes:

• Competitive pay

• Benefits Offered: Medical, Dental, Vision, Life, Disability, Critical Care, Hospitalization, HSA, FSA, DCFSA and QTE

• Retirement plan: 401(k) and Roth

• Paid Time Off: 16 days front loaded. Prorated based on the start date month

• 11.5 paid holidays per year

• Employee assistance program

• Excellent career growth opportunity

• Fun, team-focused working environment

• Employee driven community outreach program

• Relocation packages available

The application window is anticipated to close on: