Incident Response Security Engineer

Empower; Topeka (KS); On-site; USD 106,000 - 149,000; Full time

Benefits offered by this job

Health Insurance

401(k) with company match

Tuition reimbursement

Casual dress code

Paid time off + holidays

Volunteer time off

Job summary

Empower seeks a Security Engineer (Incident Response) to triage, investigate, and remediate security incidents across the corporate IT environment. You will oversee SIEM/EDR and other tooling, respond to alerts, and collaborate with technical and non-technical teams on enterprise-wide security initiatives.

You will lead medium severity investigations, perform forensic analysis, and help improve playbooks, detection rules, and runbooks while contributing to on-call rotations and remediation

Qualifications

• Bachelor’s degree or equivalent in IT related field.
• “3+ years” in incident response or SOC operations.
• “3+ years” managing security controls (EDR, SIEM, email security) and detection engineering.
• “2+ years” creating incident response playbooks and runbooks.
• “1+ years” in regulated IT environments (SOC2, SOX, HIPAA, GLBA, PCI).
• “2+ years” in network/app security, pen testing, or threat assessments.
• “5 years” in IT within the last decade.
• “1+ years” in generative AI/automation and scripting.
• Ability to participate in on-call rotation.

Responsibilities

• Respond to day-to-day security alerts from SIEM, EDR, and email security tools.
• Lead medium severity investigations from detection to remediation.
• Contribute to team-wide large-scale investigations.
• Perform forensic review of alerts, files, and systems.
• Correlate data to produce a coherent incident narrative.
• Determine true vs false positives with justification.
• Identify scope and impact of incidents and communicate findings.
• Document findings and communicate risk clearly to teams.
• Triage and analyze with low error rate; improve detection rules.
• Contribute to playbooks, runbooks, and tabletop exercises.
• Assist with full remediation and implementation of new controls.
• Configure, maintain, and monitor security tooling.
• Identify gaps in detection or processes and remediate.
• Communicate incident findings to technical and non-technical audiences.

Skills

Incident response

SOC operations

Detection engineering

Automation scripting

On-call readiness

Forensic analysis

Education

Bachelor's degree in Information Technology or Computer Science

Tools

SIEM

EDR

Email security

Forensic tools

Job description

Empower seeks a Security Engineer (Incident Response) to triage, investigate, and remediate security incidents across the corporate IT environment. You will oversee SIEM/EDR and other tooling, respond to alerts, and collaborate with technical and non-technical teams on enterprise-wide security initiatives.

You will lead medium severity investigations, perform forensic analysis, and help improve playbooks, detection rules, and runbooks while contributing to on-call rotations and remediation