Senior Security Operations Engineer

Better is reimagining home finance and making it faster, cheaper, and easier for everyone to become a homeowner. We leverage creative technology and innovation to make the home buying journey more approachable and understandable and home finance more affordable and accessible. Here are some interesting facts to help you get to know Better:
- We’ve funded over $100 billion in loans for our customers, more than any other fintech- Yahoo! Finance - Best Mortgage Lender for First Time Homebuyers of January 2025: Best lender for quick approval- Yahoo! Finance - Best Mortgage Lenders of 2025: Best online mortgage lender - Fintech Breakthrough Award: Best Lending Innovation Award - Money Magazine - 8 Best Mortgage Lenders of 2025: Best for fast closing- We are Forbes’ Best Online Mortgage Lender for 2023- We have raised over $1.2 billion in equity capital to transform the mortgage industry, the largest financial asset class in the world
We are a place where smart, hungry, ambitious people who want to recognize their full potential thrive. 
A Better Opportunity
We are seeking a highly skilled and experienced Senior Security Operations Engineer to join our team in safeguarding our company's digital assets and ensuring compliance with industry regulations. The ideal candidate will play a crucial role in designing, implementing, and maintaining robust security measures to protect our systems, networks, and data. The Senior Operations Security Engineer will play a vital role in maintaining our organization's security posture and ensuring security threats are addressed and remediated. This position offers an exciting opportunity to make a significant impact on our company's overall security strategy and implementation. 

Responsibilites

• Conduct comprehensive security assessments to identify vulnerabilities in existing systems and infrastructure and work with teams to remediate vulnerabilities.
• Monitoring vendor interaction with company's technology; identifies issues and provides guidance/support through to resolution
• Design and implement advanced security measures to protect against potential threats, including cloud-based PaaS/SaaS/IaaS security, endpoint, email, and other security platforms.
• Work with development teams on addressing application security findings
• Perform operational security duties such as ticket escalation to the security team or working across IT teams to identify and remediate security incidents.
• Monitor network activity for signs of unauthorized access or malicious activity, using advanced tools and technologies.
• Perform regular security audits and risk assessments to identify weaknesses in the organization's security infrastructure.
• Create and maintain incident response plans, leading incident response teams during security breaches.
• Collaborate with other teams to define access controls, password policies, and encryption standards.
• Implement and manage cloud-based security information and event management (SIEM) systems.
• Oversee vulnerability management processes, including identification, prioritization, and remediation of security vulnerabilities.
• Ensure compliance with relevant industry regulations and standards. 

Qualifications

• Minimum of 5-7 years of experience in information security, with a focus on security engineering and operations.
• Bachelor's degree in Computer Science, Information Security, or a related field.
• Strong AWS Security skillset with experience in deploying infrastructure as code as it relates to security and understanding best practices.
• Experience in understanding the security around Artificial Intelligence and how to best protect data and users
• Strong experience in email security and forensics of data
• In-depth knowledge of Azure and Microsoft security products and services
• Strong familiarity with federated identity solutions and the security of those solutions (Okta, PingID, Azure)
• In-depth knowledge of network security, encryption technologies, and security frameworks.
• Experience with AppSec tools and processes
• Strong experience with vulnerability assessment and penetration testing.
• Proficiency in configuring and troubleshooting security infrastructure platforms.
• Excellent problem-solving skills and ability to think critically in high-pressure situations.
• Strong communication skills, both written and verbal, with the ability to explain complex security concepts to non-technical stakeholders.
• Relevant industry certifications are highly desirable.
• In-depth understanding of regulatory compliance requirements in our industry.
• Ability to balance security needs with business