Security Engineer

Rate is one of the nation’s top retail mortgage lenders, delivering a seamless, tech-driven experience that helps customers reach their homeownership and financial goals. Founded in 2000 and based in Chicago, Rate is licensed in all 50 states and D.C. and has helped over 2 million homeowners with a wide range of loan products, competitive rates and personalized service. With 5,000+ employees across 300+ offices and 12+ subsidiaries, Rate’s Loan Officers rank among the best in the country. From purchases and refinances to tapping into equity, Rate makes financing faster, simpler and less stressful. Our technology — including Same Day Mortgage, the Rate App, FlashClose℠, MyAccount and the Language Access Program — has earned recognition from HousingWire, Scotsman Guide, NerdWallet, the Chicago Tribune and Crain’s Chicago Business. Learn more at rate.com.

What Makes Our Team Awesome

We are a gritty group of passionate technologists on a mission to dominate the mortgage world! The Information Technology Team within Rate passionately and consistently puts our customers first. We are building the latest technology to help create the best mortgage experience on the planet and get your mortgage, your way, anytime, anywhere. Whether that is improving our digital mortgage platform, automating loan coordination and underwriting processes, or building out the latest marketing and customer engagement platform, we’re doing it all. We build high-performing, self-organized, cross-functional agile teams that operate with minimal hierarchy. Information Technology team members hold themselves and others accountable and live and breathe the tenets of autonomy, mastery, and purpose.

What’s the Role?

We are seeking a Security Engineer with a primary focus on cloud security and infrastructure. This generalist security role will be responsible for developing, architecting, and deploying security solutions across multiple technology domains including cloud infrastructure, network security, endpoint detection and response (EDR), data loss protection (DLP), and container environments. The Security Engineer will report to the Security Director and be a key member of the larger security engineering team, collaborating with other security engineers and application security engineers to solve objectives both independently and together. The role requires subject matter expertise in cloud security while maintaining a broad understanding of enterprise security technologies and the ability to work autonomously as well as within a team environment.

Responsibilities:

• Take ownership of security projects and initiatives from objective to completion; work independently and with minimal oversight to identify problems, evaluate solutions, and implement fixes.
• Self-manage workload and priorities; track work in sprints, articulate progress and blockers, and provide clear written and oral communication of detailed steps needed to accomplish security objectives.
• Collaborate with other security engineers and application security engineers to solve complex security challenges; contribute to team initiatives while maintaining autonomous responsibility for assigned projects.
• Design, architect, and implement secure infrastructure and security controls across multiple technology domains with emphasis on cloud deployments.
• Develop and deploy Infrastructure as Code using Terraform to provision and manage secure cloud environments while maintaining security posture.
• Proactively identify security gaps and deficiencies in existing security designs, propose plans for improvement and implementation across all security domains.
• Lead vendor evaluation, selection, and engagement for security tools and platforms; manage vendor relationships and coordinate implementations.
• Provide subject matter expertise in cloud security while maintaining competency across network security, EDR, DLP, SIEM, and other security technologies depending on organizational needs.
• Manage security logging infrastructure; identify critical log sources, configure SIEM to capture essential security events, troubleshoot logging issues, and provide recommendations for log architecture and retention.
• Develop and maintain security policies, standards, procedures, and documentation to ensure consistency and compliance across the organization.
• Lead the evaluation, deployment, and management of security tools and platforms across cloud and on-premises environments.
• Collaborate with DevOps, infrastructure, development, and business teams to identify security needs, propose solutions, and integrate security controls into Infrastructure as Code, CI/CD pipelines, and deployments.
• Monitor and respond to security incidents and alerts; use SIEM and logging infrastructure to investigate and remediate threats and vulnerabilities across all security domains within defined SLAs.
• Manage identity and access controls across platforms; ensure implementation of least privilege, RBAC principles, and security best practices.
• Maintain knowledge of current security trends, emerging threats, and best practices across multiple technology domains; communicate findings to management and stakeholders.
• Assist other security team members with broader security initiatives, providing cross-training and subject matter expertise.

Qualifications:

• 5+ years' experience in security engineering with emphasis on infrastructure security, cloud security, or equivalent combination of roles solving security problems in large-scale systems.
• Demonstrated ability to self-task and work independently to identify, analyze, and solve complex security problems with minimal oversight; comfort taking ownership of projects from objective to completion.
• Ability to self-manage workload and priorities; comfort tracking work in sprint-based environments and providing regular updates on progress, blockers, and completion status.
• Strong written and oral communication skills with ability to document and clearly articulate detailed steps, plans, and requirements needed to accomplish security objectives.
• Experience working with vendors; ability to evaluate, select, and manage vendor solutions for security tools and platforms.

Preferred Experience:

• Designing, implementing, and maintaining cloud infrastructure security in large-scale, multi-cloud environments (AWS, Azure, GCP, or equivalent).
• Proficiency with Infrastructure as Code (IaC), specifically Terraform, for deploying and managing secure cloud infrastructure.
• Cloud security fundamentals including identity and access management (IAM), network segmentation, encryption, and data protection across cloud platforms.
• Building and securing containerized environments including Kubernetes, Docker, container registries, and orchestration platforms.
• Cloud security posture management and compliance frameworks including industry standards such as NIST and CIS benchmarks.
• Implementing and managing cloud security tools and services such as cloud access security brokers (CASB) and cloud workload protection platforms (CWPP).
• BONUS: Experience with third-party Cloud Security Posture Management (CSPM) tools such as Wiz, Lacework, or equivalent.

Other Useful Details

Employee Type: Full-Time

Pay Range: annual pay + bonus and/or commissions

Location: Remote

Rate Companies is an Equal Opportunity Employer that welcomes and encourages all applicants to apply regardless of age, race, sex, religion, color, national origin, disability, veteran status, sexual orientation, gender identity and/or expression, marital or parental status, ancestry, citizenship status, pregnancy or other any other protected characteristic. #LI-Remote

The company offers a comprehensive benefits program to eligible employees, including eligibility to participate in a company-sponsored 401(k); vacation benefits; eligibility for medical, dental, vision, and prescription drug benefits; flexible benefits (e.g., healthcare and/or dependent day care flexible spending accounts); life insurance and death benefits; critical care insurance; personal accidental insurance; commuter benefits; pet insurance; certain time off and leave of absence benefits; well-being benefits (e.g., employee assistance program); and other supplemental benefits (e.g. legal planning assistance; identity theft protection; pet insurance; wellness resources).

Please click this link to learn more about our benefit offerings for Washington State: Benefit Offerings for Washington State