Our vision for the future is based on the idea that transforming financial lives starts by giving our people the freedom to transform their own. We have a flexible work environment, and fluid career paths. We not only encourage but celebrate internal mobility. We also recognize the importance of purpose, well-being, and work-life balance. Within Empower and our communities, we work hard to create a welcoming and inclusive environment, and our associates dedicate thousands of hours to volunteering for causes that matter most to them.
Chart your own path and grow your career while helping more customers achieve financial freedom. Empower Yourself.
Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa at this time, including CPT/OPT.
We are looking for a Security Engineer to join our cybersecurity team and strengthen our data protection and detection capabilities. In this role, you will design, implement, and optimize Data Loss Prevention (DLP) policies, build and tune detections within SIEM platforms, and automate security processes to improve efficiency and resilience. You will collaborate closely with incident response, cloud security, and detection engineering teams to ensure enterprise systems remain secure while supporting business operations.
What you will do:
Innovate and automate tasks using Empower approved AI service where possible
Cross-Functional Collaboration: Engage with Legal and HR regarding ITM incidents with the guidance and leadership of other senior team members
Gather supporting material and evidence for use during investigations and review this information with senior team members
DLP Operations & Decision-Making: Conduct release reviews for routine release requests by following established processes
Escalate requests when the request is not routine
Deploy, manage, and optimize enterprise DLP solutions (Proofpoint, Microsoft Purview) across endpoints and cloud environments
Perform weekly threat hunting to identify gaps in DLP protections, as well as the greater security posture as a whole
Monitor for, and escalate events where Insider Threat activity has been found Situations such as anti-sleep programs being used, employee fraud, or use of unapproved/potentially dangerous applications
Manage and create labels and labeling schemes for business project needs using both sensitivity labels and retention labels
Work to integrate new and upcoming solutions such as Proofpoint AEDLP (Tessian)
Design, tune, and validate rules in Proofpoint DLP to be sent to Splunk Enterprise Security to support threat detection and incident response
Automate security workflows using PowerShell, Python and AWS services (Lambda, CloudFormation/CDK, DynamoDB, SQS, S3)
Integrate security tools with SIEM/SOAR platforms to enhance visibility and response capabilities
Work cross-functionally with security operations, detection engineering, and IT to improve security posture and processes for insider threat management
What you will bring:
Excellent communication skills for collaboration with Legal, HR, and executive stakeholders
Bachelor’s degree in Computer Information Systems, Cybersecurity, (or related field), or equivalent experience
AWS Solutions Architect Associate (or equivalent experience)
4+ years of experience in security engineering, detection engineering, or data protection
Hands-on experience with DLP technologies (Proofpoint, Microsoft Purview) and SIEM platforms (Splunk ES)
Strong Python and PowerShell scripting skills with experience in automation and cloud-native development
Familiarity with networking fundamentals, and Linux environments
Strong problem-solving skills with the ability to drive security improvements and cost-saving initiatives
This job operates in a professional office environment.
This job description is not intended to be an exhaustive list of all duties, responsibilities and qualifications of the job. The employer has…