Security Engineer

Empower • KS Remote, KS

6d • $105,700 - $149,275

About The Position

The Security Engineer (Incident Response) supports the triage, investigation, and remediation of security incidents to protect the corporate IT environment and maintain compliance with internal and external requirements. The role oversees security tools, responds to alerts, and advances investigations through remediation, collaborating with technical and non-technical teams on enterprise-wide information security initiatives. The position operates in a professional office environment and requires participation in an on-call rotation.

Requirements

• Bachelor's degree in Information Technology, Computer Science, a related field, or equivalent experience.
• At least 3 years of experience in incident response and/or security operations center operations, triaging and investigating cyber events and incidents.
• At least 3 years of experience managing security controls, including defining policies and administering EDR, email security, and SIEM; performing detection engineering; and responding to alerts and incidents.
• At least 2 years of experience creating incident response playbooks, runbooks, and tabletop exercises.
• At least 1 year of experience as a security specialist in a regulated IT environment involving SOC2, SOX, HIPAA, GLBA, PCI, or a combination of these frameworks, including assisting with or coordinating audits.
• At least 2 years of experience in network and application security administration, penetration testing, and/or threat assessments.
• At least 5 years of experience in information technology or a related field within the last 10 years.
• At least 1 year of generative AI and automation experience, including scripting.
• Ability to participate in an on-call rotation.
• Authorization to work for any employer in the United States; the employer cannot sponsor or take over sponsorship of an employment visa, including CPT/OPT.

Responsibilities

• Respond to daily alerts from security tooling, including SIEM, EDR, email security, and other tools.
• Independently handle medium-severity security investigations from detection through investigation and resolution.
• Participate in team-based, large-scale investigations.
• Perform forensic reviews of alerts, files, and systems.
• Correlate multiple data points into a coherent account of an event.
• Determine true positives versus false positives and document the justification.
• Identify and communicate incident scope and impact.
• Document findings clearly and completely, and communicate status and risk effectively.
• Perform consistent, accurate triage and analysis with a low error rate.
• Improve playbooks, runbooks, and detection rules, and participate in tabletop exercises.
• Help drive incidents to full remediation and assist with implementing new and compensating controls.
• Configure, maintain, and monitor assigned security tooling.
• Identify and remediate gaps in detection or process.
• Communicate incident findings in technical and non-technical language to various teams.

Benefits

• Medical, dental, vision, and life insurance.
• 401(k) plan with company matching contributions up to 6%, financial advisory services, potential company discretionary contribution, and a broad investment lineup.
• Tuition reimbursement up to $5,250 per year.
• Business-casual environment with the option to wear jeans.
• Paid time off upon hire, including a paid time off program, ten paid company holidays, and three floating holidays each calendar year.
• Paid volunteer time: 16 hours per calendar year.
• Leave programs including paid parental leave, paid short- and long-term disability, and Family and Medical Leave (FMLA).
• Business Resource Groups open to all.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level