Security Engineer - DLP and Insider threat
Empower
Our vision for the future is based on the idea that transforming financial lives starts by giving our people the freedom to transform their own. We have a flexible work environment, and fluid career paths. Within Empower and our communities, we work hard to create a welcoming and inclusive environment, and our associates dedicate thousands of hours to volunteering for causes that matter most to them. Chart your own path and grow your career while helping more customers achieve financial freedom. We are unable to sponsor or take over sponsorship of an employment visa at this time, including CPT/OPT.
We are looking for a Security Engineer to join our cybersecurity team and strengthen our data protection and detection capabilities. In this role, you will design, implement, and optimize Data Loss Prevention (DLP) policies, build and tune detections within SIEM platforms, and automate security processes to improve efficiency and resilience. You will collaborate closely with incident response, cloud security, and detection engineering teams to ensure enterprise systems remain secure while supporting business operations.
Innovate and automate tasks using Empower approved AI service where possible
Engage with Legal and HR regarding ITM incidents with the guidance and leadership of other senior team members
Gather supporting material and evidence for use during investigations and review this information with senior team members
DLP Operations & Decision-Making:
Deploy, manage, and optimize enterprise DLP solutions (Proofpoint, Microsoft Purview) across endpoints and cloud environments
Situations such as anti-sleep programs being used, employee fraud, or use of unapproved/potentially dangerous applications
Manage and create labels and labeling schemes for business project needs using both sensitivity labels and retention labels
Design, tune, and validate rules in Proofpoint DLP to be sent to Splunk Enterprise Security to support threat detection and incident response
Automate security workflows using PowerShell, Python and AWS services (Lambda, CloudFormation/CDK, DynamoDB, SQS, S3)
Integrate security tools with SIEM/SOAR platforms to enhance visibility and response capabilities
Work cross-functionally with security operations, detection engineering, and IT to improve security posture and processes for insider threat management
Excellent communication skills for collaboration with Legal, HR, and executive stakeholders
~ Bachelor’s degree in Computer Information Systems, Cybersecurity, (or related field), or equivalent experience
~ AWS Solutions Architect Associate (or equivalent experience)
~4+ years of experience in security engineering, detection engineering, or data protection
~ Hands-on experience with DLP technologies (Proofpoint, Microsoft Purview) and SIEM platforms (Splunk ES)
~ Strong Python and PowerShell scripting skills with experience in automation and cloud-native development
~ Familiarity with networking fundamentals, and Linux environments
~ This job operates in a professional office environment.
You will be evaluated in part based on your performance of the responsibilities and/or tasks listed in this job description. The job description is not a contract for employment, and either you or the employer may terminate employment at any time, for any reason, as per terms and conditions of your employment contract.
We believe that providing our employees with the means to lead healthy balanced lives results in the best possible work performance.
Medical, dental, vision and life insurance
Retirement savings – 401(k) plan with generous company matching contributions (up to 6%), financial advisory services, potential company discretionary contribution, and a broad investment lineup
Tuition reimbursement up to $5,250/year
Business-casual environment that includes the option to wear jeans
Generous paid time off upon hire – including a paid time off program plus ten paid company holidays and three floating holidays each calendar year
Paid volunteer time — 16 hours per calendar year
Leave of absence programs – including paid parental leave, paid short- and long-term disability, and Family and Medical Leave (FMLA)
Business Resource Groups (BRGs) – BRGs facilitate inclusion and collaboration across our business internally and throughout the communities where we live, work and play. Non-sales positions have the opportunity to participate in a bonus program. Sales positions are eligible for sales incentives, and in some instances a bonus plan, whereby total compensation may far exceed base salary depending on individual performance. Actual compensation offered may vary from posted hiring range based upon geographic location, work experience, education, licensure requirements and/or skill level and will be finalized at the time of offer.
We are an equal opportunity employer with a commitment to diversity. All individuals, regardless of personal characteristics, are encouraged to apply. All qualified applicants will receive consideration for employment without regard to age (40 and over), race, color, national origin, ancestry, sex, sexual orientation, gender, gender identity, gender expression, marital status, pregnancy, religion, physical or mental disability, military or veteran status, genetic information, or any other status protected by applicable state or local law.
***For remote and hybrid positions you will be required to provide reliable high-speed internet with a wired connection as well as a place in your home to work with limited disruption. You must have reliable connectivity from an internet service provider that is fiber, cable or DSL internet. Other necessary computer equipment, will be provided. You may be required to work in the office if you do not have an adequate home work environment and the required internet connection.***
Want the latest money news and views shaping how we live, work and play?
We are looking for a Security Engineer to join our cybersecurity team and strengthen our data protection and detection capabilities. In this role, you will design, implement, and optimize Data Loss Prevention (DLP) policies, build and tune detections within SIEM platforms, and automate security processes to improve efficiency and resilience. You will collaborate closely with incident response, cloud security, and detection engineering teams to ensure enterprise systems remain secure while supporting business operations.
Innovate and automate tasks using Empower approved AI service where possible
Engage with Legal and HR regarding ITM incidents with the guidance and leadership of other senior team members
Gather supporting material and evidence for use during investigations and review this information with senior team members
DLP Operations & Decision-Making:
Deploy, manage, and optimize enterprise DLP solutions (Proofpoint, Microsoft Purview) across endpoints and cloud environments
Situations such as anti-sleep programs being used, employee fraud, or use of unapproved/potentially dangerous applications
Manage and create labels and labeling schemes for business project needs using both sensitivity labels and retention labels
Design, tune, and validate rules in Proofpoint DLP to be sent to Splunk Enterprise Security to support threat detection and incident response
Automate security workflows using PowerShell, Python and AWS services (Lambda, CloudFormation/CDK, DynamoDB, SQS, S3)
Integrate security tools with SIEM/SOAR platforms to enhance visibility and response capabilities
Work cross-functionally with security operations, detection engineering, and IT to improve security posture and processes for insider threat management
Excellent communication skills for collaboration with Legal, HR, and executive stakeholders
~ Bachelor’s degree in Computer Information Systems, Cybersecurity, (or related field), or equivalent experience
~ AWS Solutions Architect Associate (or equivalent experience)
~4+ years of experience in security engineering, detection engineering, or data protection
~ Hands-on experience with DLP technologies (Proofpoint, Microsoft Purview) and SIEM platforms (Splunk ES)
~ Strong Python and PowerShell scripting skills with experience in automation and cloud-native development
~ Familiarity with networking fundamentals, and Linux environments
~ This job operates in a professional office environment.
You will be evaluated in part based on your performance of the responsibilities and/or tasks listed in this job description. The job description is not a contract for employment, and either you or the employer may terminate employment at any time, for any reason, as per terms and conditions of your employment contract.
We believe that providing our employees with the means to lead healthy balanced lives results in the best possible work performance.
Medical, dental, vision and life insurance
Retirement savings – 401(k) plan with generous company matching contributions (up to 6%), financial advisory services, potential company discretionary contribution, and a broad investment lineup
Tuition reimbursement up to $5,250/year
Business-casual environment that includes the option to wear jeans
Generous paid time off upon hire – including a paid time off program plus ten paid company holidays and three floating holidays each calendar year
Paid volunteer time — 16 hours per calendar year
Leave of absence programs – including paid parental leave, paid short- and long-term disability, and Family and Medical Leave (FMLA)
Business Resource Groups (BRGs) – BRGs facilitate inclusion and collaboration across our business internally and throughout the communities where we live, work and play. Non-sales positions have the opportunity to participate in a bonus program. Sales positions are eligible for sales incentives, and in some instances a bonus plan, whereby total compensation may far exceed base salary depending on individual performance. Actual compensation offered may vary from posted hiring range based upon geographic location, work experience, education, licensure requirements and/or skill level and will be finalized at the time of offer.
We are an equal opportunity employer with a commitment to diversity. All individuals, regardless of personal characteristics, are encouraged to apply. All qualified applicants will receive consideration for employment without regard to age (40 and over), race, color, national origin, ancestry, sex, sexual orientation, gender, gender identity, gender expression, marital status, pregnancy, religion, physical or mental disability, military or veteran status, genetic information, or any other status protected by applicable state or local law.
***For remote and hybrid positions you will be required to provide reliable high-speed internet with a wired connection as well as a place in your home to work with limited disruption. You must have reliable connectivity from an internet service provider that is fiber, cable or DSL internet. Other necessary computer equipment, will be provided. You may be required to work in the office if you do not have an adequate home work environment and the required internet connection.***
Want the latest money news and views shaping how we live, work and play?
Reference: WJ-5392_16514625