Cybersecurity Analyst

The Team: At Kind Lending, our family of diverse and talented Kind Ambassadors are the driving force behind our new approach to the mortgage experience. They're the heart and soul of the organization and our "People Before Profits" mentality shines through in every department. Kind Lending is growing and is looking for top mortgage professionals who value opportunity, lasting business partnerships, and who live out our KIND mindset. Kind Lending is determined to provide the best service in the industry while also providing homebuyers a great selection of products to enhance their buying experience. Backed by our trusted leadership team, Kind Lending's friendly and professional model puts the fun in funding. Position Description: The Cybersecurity Analyst focuses on identifying, analyzing, and responding to security threats, supporting compliance and risk management efforts, and maintaining the effectiveness of security controls across on-premises and cloud environments. Primary duties include monitoring security events and alerts, investigating potential incidents, and coordinating response activities to minimize business impact. The Cybersecurity Analyst plays a key role in detecting malicious activity, validating security findings, and ensuring timely remediation of identified risks.The position also supports vulnerability management, security tooling operations, and governance activities by assisting with audits, vendor risk reviews, and control assessments. The analyst collaborates closely with IT, Infrastructure, DevOps, and business teams to provide security guidance, improve defensive capabilities, and embed security best practices into daily operations. This role requires strong analytical skills, attention to detail, and the ability to operate effectively in a regulated environment while balancing security requirements with business needs. Key Responsibilities: Security Monitoring and Incident Response Monitor security alerts and events from Microsoft Security suite (Sentinel, Defender, Intune) and other security toolsInvestigate and triage security incidents, including malware, phishing, unauthorized access, and data exposurePerform root cause analysis and document findings, impact, and remediation stepsCoordinate incident response activities with IT, Infrastructure, and third-party vendorsAssist in containment, eradication, and recovery efforts Threat Detection and Vulnerability Management Analyze logs, network traffic, and endpoint telemetry to identify suspicious activityConduct vulnerability assessments and review scan resultsTrack remediation of vulnerabilities and validate corrective actionsStay current on emerging threats, vulnerabilities, and attack techniques Governance, Risk, and Compliance Support Support compliance with regulatory and industry frameworks such as ISO 27001, NIST, SOC 2, and applicable financial regulationsAssist with vendor risk assessments and security questionnairesParticipate in audits, risk assessments, and control testing activitiesMaintain security documentation, policies, standards, and procedures Awareness and Collaboration Support security awareness initiatives, including phishing simulations and training programsAct as a security advisor to internal teams on best practices and risk mitigationCollaborate with DevOps and Infrastructure teams to integrate security into systems and workflows Required Qualifications: Bachelors degree in Information Security, Computer Science, or related field, or equivalent professional experience2 to 5 years of experience in cybersecurity operations, SOC, and IT securityHands-on experience with SIEM and endpoint security toolsWorking knowledge of networking concepts, operating systems, and cloud environmentsStrong analytical, troubleshooting, and documentation skillsAbility to manage multiple tasks and respond effectively in high-pressure situations Preferred Qualifications: Experience in financial services, mortgage, or other regulated industriesFamiliarity with Microsoft Defender, Microsoft Sentinel, Azure, or AWS security servicesSecurity certifications such as Security+, CySA+, GCIH, or equivalentExperience with scripting or automation using PowerShell or PythonUnderstanding of cloud-first infrastructure with zero trust and defense-in-depth security models Key Competencies: Incident analysis and critical thinkingRisk-based decision makingClear written and verbal communicationAttention to detail and operational disciplineCollaboration and stakeholder engagement Work Environment: Position based out of Irvine, CA or remotely for the right candidateOccasional travel may be requiredParticipation in an on-call or incident response rotation required Pay Disclosure: The starting base salary rate of pay range for this position is $96k - $130k. The actual base is dependent on many factors such as: work experience, business needs, market demands, and other compensation components. The base pay range is subject to change and may be modified in the future. Work Authorization: Must be able to verify identity and employment eligibility to work in the U.S. without a visa sponsorship. Other Duties: This job profile is not intended to be an all-inclusive list of job duties and responsibilities, as one may perform additional related duties as assigned to meet the needs of the organization. Physical Demands: The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Primary functions require sufficient physical ability and mobility to work in an office setting; to stand or sit for prolonged periods of time; to occasionally stoop, bend, kneel, crouch, reach, and twist; to lift, carry, push, and/or pull light to moderate amounts of weight; to operate office equipment requiring repetitive hand movement and fine coordination including use of a keyboard; and to verbally communicate to exchange information.VISION: See in the normal visual range with or without correction.HEARING: Hear in the normal audio range with or without correction. Kind Lending is an Equal Opportunity Employer committed to workforce diversity. Qualified applicants will receive consideration without regard to race, religion, creed, color, orientation, gender, age, national origin, veteran status, disability status, marital status, sexual orientation, gender identity, or gender expression. ***For your security, Kind Lending will only contact you from email addresses ending in kindlending.com. Emails from any other domain should be treated as suspicious and may be phishing attempts.