Security Engineer - DLP and Insider threat

Empower • KS Remote, KS

7d • $105,700 - $149,275

About The Position

Empower is hiring a Security Engineer to strengthen its data protection and detection capabilities. The role focuses on designing, implementing, and optimizing Data Loss Prevention (DLP) policies; building and tuning detections in SIEM platforms; and automating security processes to improve efficiency and resilience. The engineer collaborates with incident response, cloud security, detection engineering, security operations, IT, Legal, and HR to protect enterprise systems while supporting business operations and managing insider-threat incidents.

The position includes deploying and optimizing Proofpoint and Microsoft Purview DLP solutions across endpoint and cloud environments, conducting routine release reviews, performing weekly threat hunting, monitoring for insider-threat activity, managing sensitivity and retention labels, and integrating emerging solutions such as Proofpoint AEDLP (Tessian). The engineer will design and validate Proofpoint DLP rules for Splunk Enterprise Security and automate workflows using Python, PowerShell, and AWS services.

The job operates in a professional office environment. Applicants must be authorized to work for any employer in the United States; visa sponsorship, including CPT/OPT sponsorship, is not available. The listed base salary range is $105,700 to $149,275. Non-sales roles may participate in a bonus program.

Requirements

• Excellent communication skills for collaboration with Legal, HR, and executive stakeholders.
• Bachelor’s degree in Computer Information Systems, Cybersecurity, or a related field, or equivalent experience.
• AWS Solutions Architect Associate certification or equivalent experience.
• At least 4 years of experience in security engineering, detection engineering, or data protection.
• Hands-on experience with DLP technologies such as Proofpoint and Microsoft Purview, and SIEM platforms such as Splunk Enterprise Security.
• Strong Python and PowerShell scripting skills, with experience in automation and cloud-native development.
• Familiarity with networking fundamentals and Linux environments.
• Strong problem-solving skills and the ability to drive security improvements and cost-saving initiatives.
• Authorization to work for any employer in the United States; employment visa sponsorship, including CPT/OPT sponsorship, is not available.

Responsibilities

• Innovate and automate tasks using Empower-approved AI services where possible.
• Engage with Legal and HR regarding insider-threat management incidents, with guidance from senior team members.
• Gather supporting materials and evidence for investigations and review the information with senior team members.
• Conduct release reviews for routine requests according to established processes and escalate non-routine requests.
• Deploy, manage, and optimize enterprise DLP solutions, including Proofpoint and Microsoft Purview, across endpoint and cloud environments.
• Perform weekly threat hunting to identify gaps in DLP protections and the broader security posture.
• Monitor for insider-threat activity and escalate identified events, including use of anti-sleep programs, employee fraud, and unapproved or potentially dangerous applications.
• Create and manage labels and labeling schemes for business projects using sensitivity labels and retention labels.
• Work to integrate new and upcoming solutions such as Proofpoint AEDLP (Tessian).
• Design, tune, and validate Proofpoint DLP rules for forwarding to Splunk Enterprise Security to support threat detection and incident response.
• Automate security workflows using PowerShell, Python, and AWS services, including Lambda, CloudFormation/CDK, DynamoDB, SQS, and S3.
• Integrate security tools with SIEM/SOAR platforms to enhance visibility and response capabilities.
• Collaborate with security operations, detection engineering, and IT to improve security posture and insider-threat management processes.

Benefits

• Medical, dental, vision, and life insurance.
• 401(k) plan with company matching contributions up to 6%, financial advisory services, potential company discretionary contributions, and a broad investment lineup.
• Tuition reimbursement up to $5,250 per year.
• Generous paid time off upon hire, including a paid time off program, ten paid company holidays, and three floating holidays per calendar year.
• Paid volunteer time of 16 hours per calendar year.
• Leave programs including paid parental leave, paid short- and long-term disability, and Family and Medical Leave (FMLA).
• Business Resource Groups open to all employees.
• Opportunity for non-sales employees to participate in a bonus program.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level