Security Engineer

Empower • KS Remote, KS

2d • $105,700 - $149,275

About The Position

Empower is hiring a technically focused Security Engineer for Threat and Vulnerability Management within Cyber Threat and Detection. The role supports vulnerability assessments and findings management, evaluates vulnerabilities for applicability and threat level, researches vulnerability alerts, assesses risks identified through threat intelligence, and helps drive timely remediation. The position calls for a self-motivated, detail-oriented professional with technical curiosity, strong communication and collaboration skills, and the ability to prioritize work under deadlines while providing excellent customer service. The role is mostly performed during weekday business hours, though some after-hours work may be required.

The Security Engineer conducts application vulnerability assessments; administers vulnerability scanning infrastructure; supports application and system owners in managing risks and remediating vulnerabilities; and supports the Application Security Management program across multiple agile software development teams. The role assesses applications for design-related security risks, helps teams determine remediation, and ensures security requirements and best-practice standards are followed. It also implements security automation, drives adoption of threat and vulnerability management tools, analyzes vulnerabilities from scanning, intelligence, research, and vendor notifications, and develops remediation strategies that use technology to orchestrate and automate work where possible.

The position develops cyber defense capabilities and maintains awareness of relevant cyber defense initiatives, indicators, threat reports, incident response techniques, and technologies. It also supports other areas within Threat and Vulnerability Management. The job operates in a professional office environment. Applicants must be authorized to work for any U.S. employer; visa sponsorship, including CPT/OPT, is not available.

Requirements

• A degree or industry-recognized certification in intelligence or cybersecurity, or equivalent experience.
• Three years of work experience in IT and two years of experience in cybersecurity and/or application security.
• Ability to perform and manage network vulnerability testing, penetration testing, and/or threat assessments.
• Understanding of cloud infrastructure and cloud security.
• Understanding of most of the following: Linux/Windows server and application administration, configuration, networking, scripting and automation, large-scale distributed computing architecture, hardware/operating system/application interaction, and security.
• Ability to interpret information security data and processes to identify risk and security threats.
• Comfort with new technology.
• Proven analytical and report-writing abilities.
• Strong analytical, technical, and problem-solving skills.
• Ability to communicate technically with analysts and strategically with senior executives.
• Strong presentation and interpersonal skills.
• Ability to manage competing priorities and work efficiently under pressure.
• Ability to organize, plan, prioritize, and complete assignments with minimal supervision.
• Knowledge of best practices, compliance standards, or frameworks such as OWASP Top 10, NIST, and SANS Top 20.

Nice To Haves

• Coding experience.
• Key industry certifications such as CISSP or GIAC certifications.

Responsibilities

• Conduct application vulnerability assessments.
• Administer vulnerability scanning infrastructure.
• Manage security vulnerabilities and risks, including identifying issues and supporting application and system owners in managing risks and remediating vulnerabilities.
• Support the Application Security Management program across multiple agile software development teams.
• Assess applications for design-related security risks and assist teams in determining appropriate remediation.
• Ensure security requirements and best-practice standards are implemented and followed across the program.
• Implement and maintain security automation across the Threat and Vulnerability Management space.
• Drive implementation of threat and vulnerability management tools.
• Analyze vulnerabilities identified through scanning, threat intelligence, research, and vendor notifications; assess impact, help prioritize, communicate with relevant partners, and drive timely remediation under internal program governance.
• Develop effective vulnerability remediation strategies and use technology to orchestrate and automate remediation where possible.
• Develop technical capabilities and methods to strengthen cyber defense and protect IT assets from cyber threats, attacks, and exploitation.
• Maintain awareness of relevant cyber defense initiatives, indicator lists, threat reports, incident response techniques, and cyber defense technologies.
• Support other areas within Threat and Vulnerability Management.

Benefits

• Medical, dental, vision, and life insurance.
• 401(k) plan with company matching contributions up to 6%, financial advisory services, potential company discretionary contribution, and a broad investment lineup.
• Tuition reimbursement up to $5,250 per year.
• Generous paid time off upon hire, including a paid time off program, ten paid company holidays, and three floating holidays each calendar year.
• Paid volunteer time: 16 hours per calendar year.
• Leave of absence programs, including paid parental leave, paid short- and long-term disability, and Family and Medical Leave (FMLA).
• Business Resource Groups open to all employees.
• Opportunity for non-sales positions to participate in a bonus program.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed