Want to know if this job is worth applying to?
TX - Remote, United States of America
Remote only
Be part of a team that's committed to making a difference. We believe in our work and our customers.
Position Location
Remote Type
RemoteOffice Location (if not fully remote):
n/aJob Description
In this role, you will oversee the architecture and optimization of Microsoft Sentinel, Defender for Endpoint, and Identity Governance controls. You will bridge the gap between high-level security strategy and hands-on execution—leading detection engineering efforts, mentoring team members, and ensuring our cloud and hybrid environments meet rigorous defensive standards through proactive threat hunting and architectural reviews.
What you will do:
Collaborate with the security team on detection engineering efforts within the SIEM platform, including use case development, correlation rule tuning, and alert optimization.
Support the management and optimization of Microsoft Defender for Endpoint, including policy architecture, strategy, and advanced investigation capabilities.
Collaborate with the team to coordinate the technical response to significant security incidents, including root-cause analysis and control improvements.
Conduct proactive threat hunting across endpoints, identity systems, and cloud environments.
Define and maintain secure configuration standards for Azure, Microsoft 365, and hybrid environments. Lead the design and optimization of identity security controls (conditional access, privileged access management, and access governance).
Define logging standards and improve telemetry coverage across infrastructure, cloud, and identity systems. Participate in architecture reviews to identify security risks early and recommend practical mitigation strategies.
Guide vulnerability management strategy and remediation prioritization. Support regulatory examinations and cybersecurity audits with technical validation of control effectiveness.
Required Experience & Qualifications:
7+ years of experience in security engineering or advanced security operations.
Deep hands-on experience with Microsoft Defender for Endpoint and SIEM platforms (specifically Microsoft Sentinel).
Strong proficiency with cloud security architecture, particularly within Azure environments.
Proven track record of leading incident response efforts and conducting thorough root-cause analysis.
Demonstrated experience with automation and scripting languages, including PowerShell, Python, and KQL.
Preferred Education & Certifications:
Bachelor’s degree in Computer Science, Information Security, or a related field (or equivalent professional experience).
At least one active relevant certification: AZ-500, CCSP, CISSP, or GIAC.
This is a nationwide, remote opportunity.
Fairway Home Mortgage, founded in 1996, is a nationwide leader in the mortgage industry. Customer service is at the heart of everything we do. We deliver personalized loan solutions with some of the fastest turn times in the industry. Our mission is to act as trusted advisors, guiding clients through every step of the mortgage process to exceed expectations and ensure satisfaction.
Our culture promotes innovation, growth, and collaboration, offering exciting career paths and professional development. Whether you're starting out or advancing your career, Fairway is a place where your skills and ambitions can thrive.
Current Employees: Head to the Fairway Careers Hub in Workday for internal job openings.
We post some job openings internally for our employees and others externally for the general public. If you cannot find the perfect role right now, do not hesitate to contact the Careers Team at careers@fairwaymc.com. We can answer any questions and keep you updated on future opportunities.
View our E-Verify and Right to Work notices HERE.
Important Notice to Job Seekers! We’ve been made aware of fraudulent messages falsely claiming to be from Fairway recruiters, including links to assessments. These are not legitimate and are not affiliated with Fairway Independent Mortgage Corporation. We’re working with our Information Security team to address this issue. Thank you for your vigilance and continued interest in joining Fairway! All official communication will come from verified Fairway email addresses or our official LinkedIn page. If you receive a suspicious message, please do not click any links and notify us.