Security Engineer

Empower; Topeka (KS); On-site; USD 106,000 - 149,000; Full time

Benefits offered by this job

Health Insurance

401(k) with company match

Tuition reimbursement

Casual dress code

Paid time off + holidays

Volunteer time off

Job summary

Empower seeks a Security Engineer (Incident Response) to triage, investigate, and remediate security incidents across the corporate IT environment. You will oversee SIEM/EDR and other tooling, respond to alerts, and collaborate with technical and non-technical teams on enterprise-wide security initiatives.

You will lead medium severity investigations, perform forensic analysis, and help improve playbooks, detection rules, and runbooks while contributing to on-call rotations and remediation

Qualifications

• Bachelor’s degree or equivalent in IT related field.
• “3+ years” in incident response or SOC operations.
• “3+ years” managing security controls (EDR, SIEM, email security) and detection engineering.
• “2+ years” creating incident response playbooks and runbooks.
• “1+ years” in regulated IT environments (SOC2, SOX, HIPAA, GLBA, PCI).
• “2+ years” in network/app security, pen testing, or threat assessments.
• “5 years” in IT within the last decade.
• “1+ years” in generative AI/automation and scripting.
• Ability to participate in on-call rotation.

Responsibilities

• Respond to day-to-day security alerts from SIEM, EDR, and email security tools.
• Lead medium severity investigations from detection to remediation.
• Contribute to team-wide large-scale investigations.
• Perform forensic review of alerts, files, and systems.
• Correlate data to produce a coherent incident narrative.
• Determine true vs false positives with justification.
• Identify scope and impact of incidents and communicate findings.
• Document findings and communicate risk clearly to teams.
• Triage and analyze with low error rate; improve detection rules.
• Contribute to playbooks, runbooks, and tabletop exercises.
• Assist with full remediation and implementation of new controls.
• Configure, maintain, and monitor security tooling.
• Identify gaps in detection or processes and remediate.
• Communicate incident findings to technical and non-technical audiences.

Skills

Incident response

SOC operations

Detection engineering

Automation scripting

On-call readiness

Forensic analysis

Education

Bachelor's degree in Information Technology or Computer Science

Tools

SIEM

EDR

Email security

Forensic tools

Job description

Our vision for the future is based on the idea that transforming financial lives starts by giving our people the freedom to transform their own. We have a flexible work environment, and fluid career paths. We not only encourage but celebrate internal mobility. We also recognize the importance of purpose, well-being, and work-life balance. Within Empower and our communities, we work hard to create a welcoming and inclusive environment, and our associates dedicate thousands of hours to volunteering for causes that matter most to them.Chart your own path and grow your career while helping more customers achieve financial freedom. Empower Yourself.

Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa at this time, including CPT/OPT.

The Security Engineer (Incident Response) will support the triage, investigation, and remediation of security incidents to protect the corporate IT environment and maintain compliance with internal and external requirements. This role will oversee various security tools, respond to alerts, and work investigations to remediation. The Security Engineer with collaborate with both technical and non-technical teams to contribute to enterprise-wide information security initiatives.

What you will do:

• Respond to day-to-day alerts that come into security tooling including SIEM, EDR, email security, and other tooling.
• Independently work medium severity security investigations from detection to investigation to resolution.
• Participate in and contribute to team-based large-scale investigations.
• Perform forensic review of alerts, files, systems.
• Correlate multiple data points into a coherent story
• Accurately determine true positive vs false positive with documented justification
• Identify and communicate scope and impact of incidents.
• Document findings clearly and completely, communicate status and risk effectively.
• Perform consistent and accurate triage and analysis with a low error rate.
• Provide improvements to playbooks, runbooks, and detection rules, participate in tabletop exercises.
• Assist with driving incidents to full remediation and assist with implementing new and compensating controls.
• Configure, maintain, and monitor assigned tooling.
• Flag and remediate gaps in detection or process.
• Communicate incident findings in both technical and non-technical language to various teams.

What you will bring:

• Bachelor's degree in Information Technology, Computer Science, a related field, or equivalent experience.
• 3+ years of experience in incident response and/or security operations center operations, triaging and investigating cyber events and incidents.
• 3+ years of experience managing security controls, including defining policies and administering EDR, email security, SIEM, performing detection engineering, and responding to alerts and incidents.
• 2+ years of experience creating incident response playbooks, runbooks, and tabletop exercises.
• 1+ years of experience as a security specialist in a regulated IT environment involving SOC2, SOX, HIPAA, GLBA, PCI, or a combination of these frameworks, including responsibility for assisting with or coordinating audits.
• 2+ years of experience in network and application security administration, penetration testing, and/or threat assessments.
• 5 years of experience in information technology or a related field within the last 10 years.
• 1+ years of generative AI and automation experience including scripting.
• Ability to participate in on-call rotation.

This job operates in a professional office environment.

This job description is not intended to be an exhaustive list of all duties, responsibilities and qualifications of the job. The employer has the right to revise this job description at any time. You will be evaluated in part based on your performance of the responsibilities and/or tasks listed in this job description. You may be required to perform other duties that are not included on this job description. The job description is not a contract for employment, and either you or the employer may terminate employment at any time, for any reason, as per terms and conditions of your employment contract.

What we offer you

• Medical, dental, vision and life insurance
• Retirement savings – 401(k) plan with generous company matching contributions (up to 6%), financial advisory services, potential company discretionary contribution, and a broad investment lineup
• Tuition reimbursement up to $5,250/year
• Business-casual environment that includes the option to wear jeans
• Generous paid time off upon hire – including a paid time off program plus ten paid company holidays and three floating holidays each calendar year
• Paid volunteer time — 16 hours per calendar year
• Leave of absence programs – including paid parental leave, paid short- and long-term disability, and Family and Medical Leave (FMLA)Business Resource Groups (BRGs) – BRGs facilitate inclusion and collaboration across our business internally and throughout the communities where we live, work and play. BRGs are open to all. BRGs are open to all.

Base Salary Range

Base Salary Range$105,700.00 - $149,275.00

The salary range above shows the typical minimum to maximum base salary range for this position in the location listed. Non-sales positions have the opportunity to participate in a bonus program. Sales positions are eligible for sales incentives, and in some instances a bonus plan, whereby total compensation may far exceed base salary depending on individual performance. Actual compensation offered may vary from posted hiring range based upon geographic location, work experience, education, licensure requirements and/or skill level and will be finalized at the time of offer.

Equal opportunity employer

Drug-free workplace

We are an equal opportunity employer with a commitment to diversity. All individuals, regardless of personal characteristics, are encouraged to apply. All qualified applicants will receive consideration for employment without regard to age (40 and over), race, color, national origin, ancestry, sex, sexual orientation, gender, gender identity, gender expression, marital status, pregnancy, religion, physical or mental disability, military or veteran status, genetic information, or any other status protected by applicable state or local law.

For remote and hybrid positions you will be required to provide reliable high-speed internet with a wired connection as well as a place in your home to work with limited disruption. You must have reliable connectivity from an internet service provider that is fiber, cable or DSL internet. Other necessary computer equipment, will be provided. You may be required to work in the office if you do not have an adequate home work environment and the required internet connection.