Security Engineer: DLP & Insider Threat | Remote

Empower; Greenwood Village (CO); On-site; USD 106,000 - 149,000; Full time

Benefits offered by this job

Medical, dental, vision, and life 보험

401(k) with company match

Tuition reimbursement

Paid time off

Volunteer time

BRGs

Job summary

Empower is seeking a Security Engineer to strengthen our data protection and detection capabilities. You will design, implement, and optimize DLP policies, build detections in SIEM platforms, and automate security processes to support business operations.

Collaborate with incident response, cloud security, and detection engineering teams to protect enterprise systems while enabling growth. The role requires 4+ years in security engineering and hands-on DLP tools experience in a fast-paced

Qualifications

• Bachelor’s degree in Computer Information Systems, Cybersecurity, (or related field), or equivalent experience.
• AWS Solutions Architect Associate (or equivalent experience).
• 4+ years of experience in security engineering, detection engineering, or data protection.
• Hands-on experience with DLP technologies (Proofpoint, Microsoft Purview) and SIEM platforms (Splunk ES).
• Strong Python and PowerShell scripting skills with experience in automation and cloud-native development.
• Familiarity with networking fundamentals, and Linux environments.
• Strong problem-solving skills with the ability to drive security improvements and cost-saving initiatives.

Responsibilities

• Innovate and automate tasks using Empower approved AI service where possible
• Cross-Functional Collaboration: Engage with Legal and HR regarding ITM incidents with leadership guidance; gather material for investigations.
• DLP Operations & Decision-Making: Conduct release reviews and escalate non-routine requests.
• Deploy, manage, and optimize enterprise DLP solutions (Proofpoint, Microsoft Purview) across endpoints and cloud environments.
• Perform weekly threat hunting to identify gaps in DLP protections and overall security posture.
• Monitor for Insider Threat activity and escalate incidents; address cases like anti-sleep programs, employee fraud, or unapproved applications.
• Manage and create labels and labeling schemes for business projects using sensitivity and retention labels.
• Work to integrate new solutions like Proofpoint AEDLP (Tessian).
• Design, tune, and validate rules in Proofpoint DLP; send to Splunk ES for detection and response.
• Automate security workflows using PowerShell, Python and AWS services (Lambda, CloudFormation/CDK, DynamoDB, SQS, S3).
• Integrate security tools with SIEM/SOAR platforms to improve visibility and response.
• Collaborate with security operations, detection engineering, and IT to improve insider threat management.

Skills

Python

PowerShell

DLP technologies

SIEM

Communication

Networking

Linux

Problem solving

Education

Bachelor’s degree in Computer Information Systems, Cybersecurity, or related field

AWS Solutions Architect Associate

Tools

Proofpoint

Microsoft Purview

Splunk ES

Job description

Empower is seeking a Security Engineer to strengthen our data protection and detection capabilities. You will design, implement, and optimize DLP policies, build detections in SIEM platforms, and automate security processes to support business operations.

Collaborate with incident response, cloud security, and detection engineering teams to protect enterprise systems while enabling growth. The role requires 4+ years in security engineering and hands-on DLP tools experience in a fast-paced