Job description

Lendistry is an Equal Opportunity/Affirmative Action Employer. We consider applicants without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, veteran status, disability, genetic information, or membership in any other group protected by federal, state, or local law. If you need assistance or accommodation due to a disability, you may contact us at hr lendistry.com Lendistry does not accept unsolicited resumes from recruiters, employment agencies, or staffing firms. To conduct business with Lendistry, a Master Services Agreement (MSA) must be executed and confirmed prior to submitting any information relating to a potential candidate. Without a signed MSA, Lendistry shall not be responsible to any individual or entity for any payment relating to any form of fee or compensation. And, in the event that a resume or candidate is submitted by a recruiter, an employment agency, or a staffing firm without a fully executed MSA, Lendistry has the unrestricted right to pursue and hire any of those candidate(s) without any legal or financial responsibility to the recruiter, agency, and/or firm. A Day in the Life The Security Engineer I is a hands-on technical practitioner responsible for the day-to-day operation of Lendistry’s security monitoring, incident response, and vulnerability management capabilities across corporate IT, cloud, and third-party environments. This role partners closely with the Security Engineer Lead, the SOC and MSSP, Infrastructure, Cloud Engineering, Application Engineering, and GRC to detect threats early, respond quickly, and drive security issues to closure without slowing business velocity. This role is the first point of coordination for security events and incidents. You will triage and investigate alerts, run incident response playbooks, document and communicate incident status, and track corrective actions through to completion, while supporting vulnerability remediation and audit readiness. The ideal candidate is curious, detail-oriented, and eager to grow into deeper technical and incident leadership responsibilities. Lendistry: Who We Are We’re proud to be the nation’s largest minority-led, tech-savvy lender for small businesses and commercial real estate. As a certified Community Development Financial Institution (CDFI) and Community Development Entity (CDE), our mission is all about creating economic opportunities and fueling growth for small business owners and their communities. Join us as we pave the way with innovative financing and financial education! What You’ll Be Doing Monitor, triage, and investigate security alerts from SIEM, EDR, email security, and cloud-native tools, escalating confirmed threats to the Security Engineer Lead Act as first responder and incident coordinator, executing incident response playbooks through detection, containment, eradication, and recovery Maintain incident records, timelines, and evidence; facilitate post-incident reviews and track corrective actions to closure Provide timely incident status updates to IT, Legal, Compliance, and leadership, following established escalation paths Partner with the SOC and MSSP providers to validate alerts, refine escalation procedures, and improve response quality Develop, maintain, and test incident response playbooks and runbooks; support tabletop exercises Tune SIEM and EDR detection rules and policies to reduce false positives and improve detection coverage Operate vulnerability scanning tools, validate findings, and track remediation against defined SLAs Assist with vendor security assessments and collect evidence to support SOC 2, ISO 27001, and regulatory audit activities Build and maintain security metrics and dashboards (e.g., mean time to detect and respond, incident volume, open vulnerabilities) Automate repetitive security tasks using scripting and available platform capabilities Your Areas of Knowledge and Expertise 2–4 years of experience in cybersecurity engineering, security operations (SOC), or incident response Hands-on experience with SIEM and EDR platforms for alert triage and investigation Working knowledge of the incident response lifecycle (e.g., NIST SP 800-61) and common attack techniques (e.g., MITRE ATT&CK) Familiarity with AWS and/or Azure security services and cloud logging Understanding of vulnerability management concepts, including CVSS scoring and remediation prioritization Working knowledge of SOC 2 and ISO 27001 frameworks Basic scripting ability (Python, PowerShell, or similar) for automation and analysis Strong written and verbal communication skills, including clear incident documentation for technical and non-technical audiences Preferred: Bachelor’s degree in a related field or equivalent experience; certifications such as Security , CySA , GCIH, SC-200, or AWS Security Specialty Compensation Range The US base salary range for this full-time position is $84,000 - $118,000 annually. Our salary ranges are determined by role, level, and location. The range displayed on each job posting reflects the minimum and maximum base salary for new hires for the position across all US locations. Within the range, individual pay is determined by multiple factors like job-related skills, experience, and state of residence. Your recruiter can share more about the specific salary range during the interview process. Please note that the compensation details listed in US role postings reflect the base salary only, and do not include any variable compensation elements. Why You ll Love Working Here: Comprehensive Medical, Dental, and Vision Insurance Generous Paid Time Off Birthday Day Off 12 Paid Company Holidays 401(k) Match FSA and HSA Paid Life Insurance Paid Disability Insurance Pet Insurance Employee Assistance Program (EAP) Professional Development Courses In Office Provided Snacks and Drinks Gym Facilities (LA & Tustin/CEC Offices) In Office Engagement Activities Physical Requirements This is a stationary position that requires frequent sitting (approximately 95%), repetitive wrist motions, grasping, speaking, listening, close vision, and the ability to adjust focus. It also may require occasional standing, lifting, carrying of 20lbs or less, walking, kneeling, bending/stooping, twisting, pulling/pushing, and reaching above the shoulder. Employees in this position must be physically able to efficiently perform the essential functions of the position. ACKNOWLEDGEMENT B.S.D. Capital, Inc. dba Lendistry is an equal employment opportunity employer committed to providing its employees, applicants and other covered persons with equal opportunities without regard to race, color, age (40 or older), religious creed (including religious belief, practice or dress and grooming practices), national origin, ancestry, physical disability, mental disability, medical condition, genetic information, marital status, sex, gender (including pregnancy, childbirth or medical condition related to pregnancy or childbirth), gender expression, gender identity, sexual orientation, military or veteran status (including past, current or prospective service), or any other characteristic protected under applicable federal, state or local law.

Requirements

Must-haves

If you need assistance or accommodation due to a disability, you may contact us at hr lendistry.com
A Day in the Life
Lendistry: Who We Are
What You’ll Be Doing
Monitor, triage, and investigate security alerts from SIEM, EDR, email security, and cloud-native tools, escalating confirmed threats to the Security Engineer Lead
Act as first responder and incident coordinator, executing incident response playbooks through detection, containment, eradication, and recovery
Maintain incident records, timelines, and evidence; facilitate post-incident reviews and track corrective actions to closure
Provide timely incident status updates to IT, Legal, Compliance, and leadership, following established escalation paths
Partner with the SOC and MSSP providers to validate alerts, refine escalation procedures, and improve response quality
Develop, maintain, and test incident response playbooks and runbooks; support tabletop exercises
Tune SIEM and EDR detection rules and policies to reduce false positives and improve detection coverage
Operate vulnerability scanning tools, validate findings, and track remediation against defined SLAs
Assist with vendor security assessments and collect evidence to support SOC 2, ISO 27001, and regulatory audit activities
Build and maintain security metrics and dashboards (e.g., mean time to detect and respond, incident volume, open vulnerabilities)
Automate repetitive security tasks using scripting and available platform capabilities
Your Areas of Knowledge and Expertise
2–4 years of experience in cybersecurity engineering, security operations (SOC), or incident response
Hands-on experience with SIEM and EDR platforms for alert triage and investigation
Working knowledge of the incident response lifecycle (e.g., NIST SP 800-61) and common attack techniques (e.g., MITRE ATT&CK)
Familiarity with AWS and/or Azure security services and cloud logging
Understanding of vulnerability management concepts, including CVSS scoring and remediation prioritization
Working knowledge of SOC 2 and ISO 27001 frameworks
Basic scripting ability (Python, PowerShell, or similar) for automation and analysis

Nice-to-haves

Preferred: Bachelor’s degree in a related field or equivalent experience; certifications such as Security , CySA , GCIH, SC-200, or AWS Security Specialty

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awsazurepython

Platform: workday
Effort: long

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Paid Time Off

Professional Development