DLP & Insider Threat Security Engineer

Empower; Oregon; Hybrid; USD 106,000 - 149,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

401(k) with match

Tuition reimbursement

Casual dress code

Paid time off

Volunteer time off

Job summary

Empower is seeking a Security Engineer to strengthen data protection and detection capabilities. You will design, implement, and optimize DLP policies, build detections in SIEM, and automate security processes to improve efficiency.

You’ll work with incident response, cloud security, and detection teams to keep enterprise systems secure while supporting operations. You will collaborate with Legal and HR on ITM incidents, perform threat hunting, manage labeling schemes, and integrate new

Qualifications

• Bachelor’s degree or equivalent experience in a related field.
• AWS Solutions Architect Associate or equivalent experience.
• 4+ years of experience in security engineering, detection engineering, or data protection.
• Hands-on experience with DLP technologies (Proofpoint, Microsoft Purview) and SIEM platforms (Splunk ES).
• Strong Python and PowerShell scripting skills with automation and cloud-native development.
• Familiarity with networking fundamentals and Linux environments.
• Strong problem-solving skills to drive security improvements and cost-saving initiatives.

Responsibilities

• Innovate and automate tasks using Empower approved AI services where possible.
• Engage with Legal and HR regarding ITM incidents under guidance of senior team members.
• Gather supporting material and evidence for investigations and review with senior team members.
• Deploy, manage, and optimize enterprise DLP solutions (Proofpoint, Microsoft Purview) across endpoints and cloud environments.
• Perform weekly threat hunting to identify gaps in DLP protections and overall security posture.
• Monitor for insider threat activity and escalate events when found.
• Design, tune, and validate rules in Proofpoint DLP for Splunk Enterprise Security integration.
• Automate security workflows using PowerShell, Python and AWS services (Lambda, CloudFormation/CDK, DynamoDB, SQS, S3).
• Integrate security tools with SIEM/SOAR platforms to enhance visibility and response.
• Collaborate with security operations, detection engineering, and IT to improve security posture.

Skills

Effective communication

AWS cloud concepts

Python & PowerShell

Security engineering

Automation

Education

Bachelor’s degree in Computer Information Systems, Cybersecurity, or related field

Tools

Proofpoint

Microsoft Purview

Splunk ES

Job description

Empower is seeking a Security Engineer to strengthen data protection and detection capabilities. You will design, implement, and optimize DLP policies, build detections in SIEM, and automate security processes to improve efficiency.

You’ll work with incident response, cloud security, and detection teams to keep enterprise systems secure while supporting operations. You will collaborate with Legal and HR on ITM incidents, perform threat hunting, manage labeling schemes, and integrate new