Senior Infrastructure Security Engineer

## Senior Infrastructure Security Engineer Apply:
Flowood MS:
Full time:
Posted Yesterday:
JR2292
** We take pride in what we do! Deciding to come grow with us is an exciting opportunity to enhance your career success stories. You are the center to what we do. We would love to have you here!
** The Senior Infrastructure Security Engineer is responsible for designing, implementing, maintaining, and strengthening the security controls that protect Tower Loan’s enterprise infrastructure, networks, systems, and sensitive information. This position serves as a senior technical resource for security engineering, threat detection, incident response, vulnerability management, and identity protection.
A strong understanding of enterprise networking, Windows Server, VMware, and on-premises data centers is required to assess risks and protect these environments. The role works closely with infrastructure and network teams, with its primary focus on securing the technology environment.
** Duties/Responsibilities:
*** Design, implement, administer, and continuously improve cybersecurity controls protecting on-premises data centers, branch locations, endpoints, networks, and corporate systems.
* Administer and optimize security platforms, including Fortinet Forti Gate, Forti Manager, Forti Analyzer, Crowd Strike Falcon, Proofpoint, Zscaler, and related technologies.
* Configure, review, and strengthen firewall policies, intrusion prevention, VPN security, network segmentation, and secure remote access controls.
* Monitor security events, alerts, logs, and threat intelligence to identify suspicious activity, unauthorized access, vulnerabilities, and potential incidents.
* Lead technical security investigations and incident response, including threat analysis, containment, remediation, recovery, and root-cause analysis.
* Develop and maintain endpoint detection and response capabilities, including prevention policies, detection rules, and response procedures.
* Manage email security protections, including phishing prevention, malicious attachment detection, email authentication, and data loss prevention.
* Strengthen Microsoft Entra  Active Directory security, including multifactor authentication, Conditional Access, privileged access, service accounts, and access control policies.
* Conduct vulnerability assessments, evaluate findings, prioritize remediation, and coordinate with infrastructure and application teams to reduce exposure.
* Establish and maintain system hardening standards and secure configuration baselines for Windows Server, VMware, network devices, and other infrastructure.
* Evaluate network architectures, routing, SD-WAN, VPN connectivity, and segmentation designs to identify weaknesses and recommend security improvements.
* Implement and maintain centralized security logging, monitoring, dashboards, alerting, and event correlation to improve visibility across enterprise systems.
* Perform security assessments of new technologies, infrastructure changes, network configurations, and system implementations.
* Support ransomware protection, backup security, immutable storage, disaster recovery safeguards, and the security aspects of business continuity planning.
* Develop automation using Power Shell, Python, or other tools to improve security monitoring, threat detection, and vulnerability remediation.
* Support PCI DSS, SOC 2, internal security audits, risk assessments, and other applicable regulatory and cybersecurity compliance requirements.
* Develop and maintain security policies, technical standards, incident response procedures, security diagrams, and supporting documentation.
* Collaborate with infrastructure, network, application development, and support teams to integrate security into…