Senior IT Security Analyst

Senior IT Security Analyst

Guild Mortgage Company, closing loans and opening doors since 1960. As a mortgage banking firm we are dedicated to serving the homeowner/buyer. Our goal is to provide affordable home financing for our customers, utilizing the best terms available while providing a level of professionalism and service unsurpassed in the lending industry.

The Senior IT Security Analyst is a key member of the Information Security team responsible for protecting enterprise systems, data, and infrastructure. This role leads advanced threat detection and response activities, manages security tools and processes, and partners closely with IT, engineering, and business stakeholders to reduce risk and improve the organization's security posture. This position requires a blend of technical expertise, analytical thinking, and strong communication skills to translate security risks into actionable insights for both technical teams and end-users.

This role is an exempt position with a targeted salary range of $82,506 to $118,344 annually. Compensation at Guild is influenced by a wide array of factors including but not limited to local and federal minimum wage requirements, education, level of experience, and applicant's geographical location.

• Serves as the first line of security alert escalation and guidance for IT Security Analysts.
• Performs essential duties with minimal supervision for one or multiple areas of the IT Security Program such as vulnerability management, security awareness, threat intelligence, etc.
• Monitor data activity and investigate alerts related to data exfiltration, inappropriate access, and policy violations.
• Investigate security incidents involving sensitive data, including unauthorized access and data leakage.
• Partner with the Incident Response team to contain, remediate, and document data-related incidents.
• Develop and maintain runbooks for data protection incident handling and escalation.
• Works closely with IT Security Engineers to draft runbooks, tune alerts, collaborate on escalations, and generate ideas for new alerting.
• Acts as lead for small projects by IT Security Manager and/or Director as needed.
• Conducts network monitoring and intrusion detection analysis using various computer network defense tools, such as intrusion detection/prevention systems, firewalls, and host-based security systems.
• Conducts log-based and endpoint-based threat detection to detect and protect against threats coming from multiple sources.
• Deploys cloud-centric detection to detect threats related to cloud environments and services used by the organization.
• Correlates activity across assets (endpoint, network, apps) and environments (on-premises, cloud) to identify patterns of anomalous activity.
• Reviews alerts and data from sensors, and documents formal, technical incident reports.
• Works with threat intelligence and/or threat-hunting teams.
• Provides network subscribers with incident response support, including mitigating actions to contain activity and facilitating forensics analysis when necessary.
• Works with security information and event management (SIEM) to manage/tune the system, create/manage the detection content and actively watch for alerts.
• Correlates network, cloud, and endpoint activity across environments to identify attacks and unauthorized use.
• Researches emerging threats and vulnerabilities to aid in the identification of incidents.
• Supports network vulnerability scans, security audits, and risk assessments and provides feedback to ensure compliance with corporate security policies and adherence to industry best practices.
• Provides users with incident response support, including mitigating actions to contain activity, and facilitating forensics analysis when necessary.
• Performs security standards testing against computers before implementation to ensure security.
• Ensure authorized access by investigating improper access, revoking access, reporting violations, monitoring information requests by new programming, and recommending improvements.
• Participates as a member of the Incident Response Team.
• Participates in on-call rotation outside normal business hours.

A combination of education and experience may be considered in lieu of the Bachelor's degree. Minimum four years' experience in IT Audit and/or Enterprise Risk Management, or as a Penetration Tester, Red Team/Incident Responder, Junior Security Operations Analyst, Security Coordinator and/or related required. Certifications are highly desired such as: Security+, SSCP, CISSP or other IT security certifications. Familiarity with risk assessment and risk management concepts or processes. Working knowledge of various regulatory security requirements – particularly Sarbanes-Oxley (SOX), GLBA, and CCPA. Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one. Ability to effectively influence others to modify their opinions, plans, or behaviors. Good understanding of organizational mission, values, goals, and consistent application of this knowledge. Strong problem-solving and troubleshooting skills. Ability to collaborate and maintain a working relationship with stakeholders at all levels and roles in the company. Confident, energetic self-starter, with strong interpersonal skills. Comfortable with working shifts and a changing schedule. Good judgment and a sense of urgency, and has demonstrated commitment to high standards of ethics, regulatory compliance, customer service and business integrity. Instinctive and creative. Self-motivated and possessing of a high sense of urgency and personal integrity. Excellent verbal and written communication skills required. Highly organized and detail-oriented; ability to work in a fast-paced, metrics-driven environment required. Proficiency in Microsoft Office Suite, Word, Excel, Wiki, collaborative cloud-based programs, and third-party software applications required. Commitment to company values. Customer Service - Proactive attention to each person. Integrity - Do and say what's right. Respect - Treat others with dignity. Collaboration - Listen and work together. Learning - Seek knowledge and strive for improvement. Excellence – Deliver the unexpected.

Plays a key role in area by generating insights and ideas on policies, processes, procedures, and efficiency; contributes ideas to strategic and operational plans to ensure alignment. Problem solving involves evaluating and resolving discrepancies with people, data, analyses, processes, etc. within prescribed program/project guidelines; may also involve resolving basic resource coordination and availability. Decisions and actions impact primarily workflow, processes and timeframes. Acts as a mentor/guide to less experienced professional contributor staff in a similar role; works independently and only under general direction; guided by professional standards, desired outcomes, and project plan specifications.

Work is primarily sedentary; mobility in an office setting. Ability to operate standard office equipment and keyboards. Office environment – moderate noise, no substantial exposure to adverse environmental conditions. Travel 5% or less. This role requires effective adaptation to workplace stressors, including customer service complaints, security responsibilities, and competing priorities. Work is primarily performed during the business week, Monday - Friday.

Guild offers a pleasant work environment, competitive compensation and excellent benefits package; including medical, dental, vision, life insurance, AD&D, LTD and 401(k) with employer match.

Guild Mortgage Company is an Equal Opportunity Employer.