Staff Cybersecurity Engineer

Position Summary

The Staff Cybersecurity Engineer delivers enterprise-critical protection of digital assets, directly impacting business continuity, regulatory compliance, and customer trust across Empower’s 503A/503B operations. This role owns advanced threat detection, incident response, and security engineering outcomes across cloud, infrastructure, and application environments. Leveraging AI as a force multiplier, the role accelerates detection speed, scales defensive coverage, enhances decision-making, and improves control effectiveness. The Engineer partners cross-functionally to embed security into systems and processes within a hyper-growth, highly regulated environment. Success requires strong strategic thinking, rigorous execution, continuous learning, and measurable impact at scale, while anticipating emerging threats, driving automation, and strengthening enterprise resilience.

Responsibilities

Threat Defense

• Threat Detection: Lead real-time monitoring and analysis across SIEM, XDR, and AI-driven security platforms to identify, triage, and mitigate advanced threats, improving detection accuracy and reducing dwell time.
• Incident Response: Execute and coordinate complex incident response activities using AI-enabled correlation and automation tools to accelerate containment, investigation, and recovery while maintaining compliance and forensic integrity.
• Threat Hunting: Conduct proactive, intelligence-led threat hunting using behavioral analytics, MITRE ATT&CK frameworks, and AI-driven anomaly detection to uncover hidden threats and strengthen defensive posture.

Security Engineering

• Security Architecture: Design, implement, and optimize security controls across cloud platforms, including AWS, Azure, and GCP, enforcing Zero Trust principles and enhancing identity-based protections.
• Automation Engineering: Develop and maintain SOAR-driven automation workflows and AI-enabled orchestration to streamline detection and response processes and improve operational efficiency.
• Vulnerability Management: Oversee vulnerability identification, prioritization, and remediation efforts, coordinating with engineering and operations teams to mitigate risks across applications, infrastructure, and endpoints.