Overview

We hire people, not positions. That's because, at Concora Credit, we put people first, including our customers, partners, and Team Members.

Concora Credit is guided by a single purpose: to help non-prime customers do more with credit.

Today, we have helped millions of customers access credit. Our industry leadership, resilience, and willingness to adapt ensure we can help our partners responsibly say yes to millions more.

As a company grounded in entrepreneurship, we're looking to expand our team and are looking for people who foster innovation, strive to make an impact, and want to Do More!

We’re an established company with over 20 years of experience, but now we’re taking things to the next level. We're seeking someone who wants to impact the business and play a pivotal role in leading the charge for change.

Join the nation’s leader in second-look finance servicing as our Security Operations Engineer!

The impact you’ll have at Concora Credit:

You’ll be part of an IT Information Security Operations Team in an agile environment that is rapidly growing and working to mature the organization’s security posture. This team is responsible for security incident response, investigating cyber threats, mitigating identified risks, vulnerability management, and implementing security controls throughout the organization.

This is a technical, hands-on role. Your focus will be responding to cyber threats, alerts and vulnerabilities while interfacing and working closely with other Information Security members, IT, and business teams.

Responsibilities

As our Security Operations Engineer, you will:

• Play a key role in improving our ability to monitor and respond to cyberthreats, events, and incidents to contain, isolate and mitigate risks within the organization
• Develop and maintain an incident-handling playbook
• Work closely to maintain and tune all security tools to ensure coverage, reliability, and scalability and remain effective in protecting Concora Credit assets
• Engage in compliance activities as they pertain to Security Operations and Incident response
• Develop Standard Operating Procedures (SOPs) related to new and existing SOC capabilities being delivered
• Research the latest security best practices, trends, and technologies, staying abreast of new threats, exploits, and vulnerabilities, while helping disseminate this information within infosec and IT
• Ability to anticipate and respond to changing priorities and operate effectively in a dynamic, demand-based environment, requiring flexibility and responsiveness to client matters and security needs
• Play a crucial role in ensuring the security and compliance of our infrastructure, systems, and data, especially about Payment Card Industry Data Security Standard (PCI DSS) 4.0
• Participate in an on-call rotation to provide 24/7 support for critical applications.

These duties must be performed with or without reasonable accommodation.

We know experience comes in many forms and that many skills are transferable. If your experience is close to what we're looking for, consider applying. Diversity has made us the entrepreneurial and innovative company that we are today.

Qualifications

Requirements:

• 3 years of experience in Information Security, 5 years of overall IT experience
• Strong understanding and experience with industry-leading information security tools (SIEM, EDR, AV, DLP, etc.)
• Experience with cloud services – Azure AD, Cloud App Security, Azure Security, Microsoft 365 Defender etc.
• Experience developing and implementing security controls and driving operational excellence
• Strong understanding of vulnerabilities, common attack vectors and has attacker mindset: ability to think about creative threats and attack vectors (MITRE Att&CK, Cyber Kill Chain etc.)
• Strong communication (i.e., written and verbal), presentation, teamwork skills and resourcefulness
• Demonstrated ability to manage projects and tasks within an agile and dynamic operational environment

Preferred Qualifications:

• Working knowledge of security response best practices and methodologies
• Strong knowledge of PCI DSS and experience with PCI DSS compliance effort
• Proficiency with security technologies, including firewalls, intrusion detection/prevention systems, antivirus, and encryption
• Bachelor’s degree in computer science, Engineering, Science, Math or Cyber Security related field
• Relevant Certifications such as GSEC, GMON, GCUX, GDSA, GCWN, CISSP, CISM, CCSP, Azure Security
• Experience in the financial services or servicing operations sectors desirable

What’s In It For You:

• Medical, Dental and Vision insurance for you and your family
• Relax and recharge with Paid Time Off (PTO)
• 6 company-observed paid holidays, plus 3 paid floating holidays
• 401k (after 90 days) plus employer match up to 4%
• Pet Insurance for your furry family members
• Wellness perks including onsite fitness equipment at both locations, EAP, and access to the Headspace App
• We invest in your future through Tuition Reimbursement
• Save on taxes with Flexible Spending Accounts
• Peace of mind with Life and AD&D Insurance
• Protect yourself with company paid Long-Term Disability and voluntary Short-Term Disability

Concora Credit provides equal employment opportunities to all Team Members and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

Concora Credit Is an equal opportunity employer (EEO).