Security Engineer

Overview

Empower is hiring a Security Engineer in Threat and Vulnerability Management under Cyber Threat and Detection. The role is technical and involves managing vulnerability assessments, tracking findings to remediation, and evaluating threat intelligence.

What you'll do

• Conduct application vulnerability assessments
• Administer vulnerability scanning infrastructure
• Manage security vulnerabilities and risks, including identifying them, supporting application and system owners to manage risks, and remediating vulnerabilities
• Support the Application Security Management program across multiple agile software development teams
• Assess applications for design-related security risks and assist teams in determining appropriate remediation
• Ensure security requirements and best practice standards are implemented and adhered to across the program
• Implement and maintain security automation across the TVM space
• Drive implementation of threat and vulnerability management tools
• Provide technical analysis of vulnerabilities identified through scanning, threat intelligence, research, and vendor notifications to determine impact, help prioritize, communicate to relevant partners, and drive timely remediation based on agreed internal program governance
• Develop effective strategies for vulnerability remediation and use technology to orchestrate and automate where possible
• Develop skills, technical capabilities, and methods to deliver the best cyber defense capability to protect IT assets from cyber threats, attacks, and exploitation
• Maintain situational awareness of cyber defense initiatives, indicator lists, threat reports, incident response techniques, and cyber defense technologies
• Support other areas within TVM
• Evaluate and report on risks identified through various threat intelligence sources
• Perform other duties as assigned

What you'll need

• A degree or industry-recognized certification in intelligence or cybersecurity, or equivalent experience
• Three years of work experience in IT
• Two years of experience in Cybersecurity and/or Application Security
• Ability to perform and manage network vulnerability testing, penetration testing, and/or threat assessments
• Understanding of Cloud Infrastructure and Cloud Security
• Demonstrated understanding of most of the following: Linux/Windows server and application administration, configuration, networking, scripting and automation, large scale distributed computing architecture (client server, cloud, intranet/internet), hardware/operating system/application interaction, and security
• Ability to interpret information security data and processes to identify risk and security threats
• Comfort with new technology
• Proven analytical and report-writing abilities
• Strong analytical, technical, and problem solving skills
• Ability to speak technically with analysts and strategically with senior executives
• Strong presentation and interpersonal skills
• Ability to manage competing priorities and work efficiently under pressure
• Ability to organize, plan, prioritize and complete assignments with minimal supervision
• Knowledge of key best practices, compliance standards or frameworks such as OWASP Top 10, NIST, and SANS Top 20

Nice to have

• Coding experience
• Holder of key industry certifications such as CISSP or GIAC certification(s)

Details

• Location: Nationwide Remote
• Work mode: Remote
• Hours are mostly during weekday business hours; some after-hours work may be required
• Applicants must be authorized to work for any employer in the U.S.; visa sponsorship, including CPT/OPT, is not available
• Operates in a professional office environment