Senior Infrastructure Security Engineer

Join Tower Loan of Mississippi, LLC onsite in Flowood, MS as a senior security engineer focused on enterprise infrastructure, networks, systems, and sensitive data.

• Design, implement, administer, and continuously improve cybersecurity controls for on-premises data centers, branch locations, endpoints, networks, and corporate systems
• Administer and optimize security platforms, including Fortinet Forti Gate
  , Forti Manager
  , Forti Analyzer
  , Crowd Strike Falcon
  , Proofpoint
  , Zscaler
  , and related technologies
• Configure and strengthen firewall policies, intrusion prevention, VPN security, network segmentation, and secure remote access controls
• Monitor security events, alerts, logs, and threat intelligence to detect suspicious activity, unauthorized access, vulnerabilities, and potential incidents
• Lead technical security investigations and incident response, including threat analysis, containment, remediation, recovery, and root-cause analysis
• Develop and maintain endpoint detection and response capabilities, including prevention policies, detection rules, and response procedures
• Manage email security protections, including phishing prevention, malicious attachment detection, email authentication, and data loss prevention
• Strengthen Microsoft Entra and Active Directory security, including multifactor authentication, Conditional Access, privileged access, service accounts, and access control policies
• Conduct vulnerability assessments, evaluate findings, prioritize remediation, and coordinate with infrastructure and application teams to reduce exposure
• Establish and maintain system hardening standards and secure configuration baselines for Windows Server, VMware, network devices, and other infrastructure
• Evaluate network architectures, routing, SD-WAN, VPN connectivity, and segmentation designs to identify weaknesses and recommend security improvements
• Implement and maintain centralized security logging, monitoring, dashboards, alerting, and event correlation to improve enterprise visibility
• Perform security assessments of new technologies, infrastructure changes, network configurations, and system implementations
• Support ransomware protection, backup security, immutable storage, disaster recovery safeguards, and security aspects of business continuity planning
• Develop automation using Power Shell
  , Python
  , or other tools to improve monitoring, threat detection, and vulnerability remediation
• Support PCI DSS
  , SOC 2, internal security audits, risk assessments, and other applicable regulatory and cybersecurity compliance requirements
• Develop and maintain security policies, technical standards, incident response procedures, security diagrams, and supporting documentation
• Collaborate with infrastructure, network, application development, and support teams to integrate security into operations and projects
• Research emerging threats, attack techniques, vulnerabilities, and security technologies, recommending practical improvements
• Serve as a senior technical escalation resource for complex security issues and provide guidance to IT team members
• Perform all other duties as assigned

• 5+ years of progressively responsible experience in cybersecurity engineering, infrastructure security, network security, or related technical roles
• Strong knowledge of cybersecurity architecture, infrastructure security, network security, and defensive security engineering
• Advanced experience with firewalls, intrusion prevention, endpoint security, email security, identity protection, and threat detection
• Strong understanding of enterprise LAN, WAN, SD-WAN, VPN, routing, switching, segmentation, and common network protocols from a security perspective
• Working knowledge of Windows Server, Active Directory, VMware virtualization, enterprise storage, and on-premises data center infrastructure
• Demonstrated ability to analyze security events, investigate suspicious activity, and coordinate technical incident response and remediation
• Proficiency in vulnerability management, security hardening, risk assessment, and secure configuration practices
• Understanding of SIEM platforms, log analysis, endpoint detection and response, and security automation
• Knowledge of identity and access management, authentication protocols, privileged access security, and Zero Trust principles
• Strong analytical, troubleshooting, and problem-solving skills across multiple infrastructure components
• Ability to independently assess technical risks, recommend security controls, and coordinate…