Cybersecurity Analyst

The Team:

At Kind Lending, our family of diverse and talented Kind Ambassadors are the driving force behind our new approach to the mortgage experience. They're the heart and soul of the organization and our "People Before Profits" mentality shines through in every department. Kind Lending is growing and is looking for top mortgage professionals who value opportunity, lasting business partnerships, and who live out our KIND mindset. Kind Lending is determined to provide the best service in the industry while also providing homebuyers a great selection of products to enhance their buying experience. Backed by our trusted leadership team, Kind Lending's friendly and professional model puts the “fun” in funding.

Position Description:

The Cybersecurity Analyst focuses on identifying, analyzing, and responding to security threats, supporting compliance and risk management efforts, and maintaining the effectiveness of security controls across on-premises and cloud environments. Primary duties include monitoring security events and alerts, investigating potential incidents, and coordinating response activities to minimize business impact. The Cybersecurity Analyst plays a key role in detecting malicious activity, validating security findings, and ensuring timely remediation of identified risks. The position also supports vulnerability management, security tooling operations, and governance activities by assisting with audits, vendor risk reviews, and control assessments. The analyst collaborates closely with IT, Infrastructure, DevOps, and business teams to provide security guidance, improve defensive capabilities, and embed security best practices into daily operations. This role requires strong analytical skills, attention to detail, and the ability to operate effectively in a regulated environment while balancing security requirements with business needs.

Key Responsibilities:

Security Monitoring and Incident Response

• Monitor security alerts and events from Microsoft Security suite (Sentinel, Defender, Intune) and other security tools
• Investigate and triage security incidents, including malware, phishing, unauthorized access, and data exposure
• Perform root cause analysis and document findings, impact, and remediation steps
• Coordinate incident response activities with IT, Infrastructure, and third-party vendors
• Assist in containment, eradication, and recovery efforts

Threat Detection and Vulnerability Management

• Analyze logs, network traffic, and endpoint telemetry to identify suspicious activity
• Conduct vulnerability assessments and review scan results
• Track remediation of vulnerabilities and validate corrective actions
• Stay current on emerging threats, vulnerabilities, and attack techniques

Governance, Risk, and Compliance Support

• Support compliance with regulatory and industry frameworks such as ISO 27001, NIST, SOC 2, and applicable financial regulations
• Assist with vendor risk assessments and security questionnaires
• Participate in audits, risk assessments, and control testing activities
• Maintain security documentation, policies, standards, and procedures

Awareness and Collaboration

• Support security awareness initiatives, including phishing simulations and training programs
• Act as a security advisor to internal teams on best practices and risk mitigation
• Collaborate with DevOps and Infrastructure teams to integrate security into systems and workflows

Required Qualifications:

• Bachelor’s degree in Information Security, Computer Science, or related field, or equivalent professional experience
• 2 to 5 years of experience in cybersecurity operations, SOC, and IT security
• Hands-on experience with SIEM and endpoint security tools
• Working knowledge of networking concepts, operating systems, and cloud environments
• Strong analytical, troubleshooting, and documentation skills
• Ability to manage multiple tasks and respond effectively in high-pressure situations

Preferred Qualifications:

• Experience in financial services, mortgage, or other regulated industries
• Familiarity with Microsoft Defender, Microsoft Sentinel, Azure, or AWS security services
• Security certifications such as Security+, CySA+, GCIH, or equivalent
• Experience with scripting or automation using PowerShell or Python
• Understanding of cloud-first infrastructure with zero trust and defense-in-depth security models

Key Competencies:

• Incident analysis and critical thinking
• Risk-based decision making
• Clear written and verbal communication
• Attention to detail and operational discipline
• Collaboration and stakeholder engagement

Work Environment:

• Position based out of Irvine, CA or remotely for the right candidate
• Occasional travel may be required
• Participation in an on-call or incident response rotation required