Cybersecurity Analyst

About HomeXpress Mortgage Corp

HomeXpress Mortgage Corp is a leading non-QM mortgage lender serving brokers with a broad range of loan products, including VA, FHA, and FHLMC. The company is licensed in 46 states and is focused on delivering mortgage closings with speed, simplicity, and convenience. It is expanding its Non-Delegated Correspondent Channel and is looking for people who bring a strong service mindset and enjoy a fast-moving environment.

Role Overview

HomeXpress is seeking a Cybersecurity Analyst to support everyday security operations in a cloud-first setting. The role is based on-site in Santa Ana with hybrid flexibility, and it is not a remote position. You will work closely with the VP of Cyber Security and Infrastructure and help protect a regulated lending environment.

This is a practical, hands-on operations role for someone dependable, organized, and accountable—someone who takes ownership of repeatable work and raises concerns early when issues arise.

Key Responsibilities

• Track and review SIEM alerts, triage them, and act within required service-level timelines.
• Assist with incident response activities such as containment, investigation, and post-incident documentation.
• Create, refine, and maintain detection logic and use cases to reduce false alerts.
• Lead vulnerability management across endpoints, cloud assets, and automated testing outputs, ensuring remediation is followed through to completion.
• Coordinate the internal and external penetration testing schedule and summarize the results.
• Oversee email security controls and verify that harmful senders are blocked.
• Review phishing reports from users and take the necessary corrective steps.
• Run phishing simulation campaigns as part of security awareness efforts.
• Support data loss prevention initiatives and monitoring of data security posture.
• Help with periodic access reviews and certification processes.
• Prepare concise daily and weekly updates for leadership.
• Keep security documentation current and assist with audit and regulatory information requests.

Required Qualifications

• At least 4 years of experience in security operations or as a security analyst.
• Practical experience working with a SIEM solution.
• Working understanding of vulnerability management and tracking remediation efforts.
• Exposure to cloud identity controls and Microsoft 365 security tools.
• Strong written communication skills and a consistent approach to recurring tasks.
• Ability to work independently and escalate issues appropriately.

Preferred Experience

• Background in a regulated industry such as financial services or mortgage lending is an advantage.
• Experience with email security, data loss prevention, data security posture management, or penetration testing tools is helpful.
• Strong analytical thinking, problem-solving ability, and attention to detail.
• Comfort working under pressure in a changing environment.
• Excellent verbal communication and cross-functional collaboration skills.
• Familiarity with advanced cyber analysis tools, network systems, firewalls, and related technologies.
• Experience installing, configuring, and administering software applications.
• Ability to troubleshoot software, hardware, and networking issues.
• Experience maintaining networking equipment and handling vulnerability alert workflows.

Education

A bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related discipline is preferred, although equivalent professional experience may also be accepted.

Physical Requirements

This role is performed in an office environment using computers and standard office equipment. The position requires mobility within the department and between other department locations as needed.

Additional Information

All information provided by applicants will be kept confidential in line with EEO guidelines.

Compensation

The expected salary range for this position is $130,000 to $150,000 per year. The role is exempt and full time.