Cybersecurity Analyst

HomeXpress – Your Leading Non-QM Mortgage Lender. Join our growing team and be part of the Top Non-QM Lender in the Business. We are known for closing mortgage loans with speed, ease, and convenience. Licensed in 46 States, we provide brokers with a full suite of mortgage products, including VA, FHA, & FHLMC. If you have a service first mentality and thrive in a fast-paced environment, HomeXpress is the place for you. Join us as we continue to grow and expand our business to the Non-Delegated Correspondent Channel! Job Title: Cybersecurity Analyst Department: Information Technology Reports To: VP, Cyber Security and Infrastructure FLSA Status: Exempt Management: No Salary Range: $130,000 - $150,000/yr PRIMARY FUNCTIONS: HomeXpress Mortgage is hiring a Cybersecurity Analyst to support day to day security operations in a cloud-first environment. On-site in Santa Ana with hybrid flexibility. Not a remote position. This role owns vulnerability management, security monitoring, email defense, and internal security testing. You will work directly with the VP of Cybersecurity and Infrastructure in a regulated lending environment. This is a hands-on operational role. We are looking for someone reliable, detail-driven, and accountable, who takes ownership of recurring work and escalates early when something is off. ESSENTIAL DUTIES AND RESPONSIBILITIES : Monitor and triage alerts in our SIEM and respond within defined SLAs Participate in incident response, including containment, investigation, and post-incident reporting Build and tune detection rules and use cases to reduce false positives Own vulnerability management across endpoint, cloud, and automated testing sources, tracking remediation to closure Run the internal and external penetration testing program on schedule and report findings Manage email security tooling and confirm malicious senders are blocked Investigate user-reported phishing and take corrective action Operate security awareness phishing simulations Support data loss prevention and data security posture monitoring Support periodic user access reviews and certifications Produce clear daily and weekly findings summaries for leadership Maintain documentation and support audit and regulatory requests DESIRED PERSONAL CHARACTERISTICS: Meticulous and committed to the highest quality. Initiative-taker with positive Can-Do attitude. Works well under pressure and relishes the responsibility that comes with the job. Problem solving and analysis. Communication proficiency. An open-minded individual that embraces change and innovation. Team and Project leadership/management experience. Excellent written and verbal communications skills. Possess the knowledge, skills, and ability to operate an advanced cyber analytical toolkit and perform required assessments. Possess expert knowledge of IT and network systems – both on-prem and SaaS. Experience with firewalls and network technologies. Experience installing, configuring, administering software applications. Demonstrated skills in troubleshooting problems with software and hardware. Experience configuring, managing, and maintaining networking equipment. Experience in Vulnerability Alert processes. JOB REQUIREMENTS: 4+ years in a security operations or analyst role Hands-on experience with a SIEM platform Working knowledge of vulnerability management and remediation tracking Familiarity with cloud identity and Microsoft 365 security tooling Strong written communication and consistent follow-through on recurring tasks Ability to work independently and escalate appropriately EDUCATION : Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field, or equivalent work experience. EXPERIENCE: Experience in a regulated industry, financial services or mortgage a plus Familiarity with email security, DLP, DSPM, or penetration testing tools PHYSICAL REQUIREMENTS: This position is in an office setting with computer and general office equipment. The position requires the ability to move freely around within the department and other department locations. All your information will be kept confidential according to EEO guidelines.