Security-Engineer, Cybersecurity-Engineer, Application-Security-Engineer Jobs

Our vision for the future is based on the idea that transforming financial lives starts by giving our people the freedom to transform their own. We have a flexible work environment, and fluid career paths. We not only encourage but celebrate internal mobility. We also recognize the importance of purpose, well-being, and work-life balance. Within Empower and our communities, we work hard to create a welcoming and inclusive environment, and our associates dedicate thousands of hours to volunteering for causes that matter most to them.

Chart your own path and grow your career while helping more customers achieve financial freedom. Empower Yourself.

Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa at this time, including CPT/OPT.

Empower is currently looking to add a Security Engineer to Threat and Vulnerability Management under Cyber Threat and Detection. This position is technical in nature, and we are looking for a self-motivated professional who is driven to succeed in a fast-paced environment. The Engineer will assist in managing vulnerability assessments and findings; tracking vulnerabilities to remediation, assist in evaluating vulnerabilities for applicability and the level of threat posed; research and investigation of vulnerability alerts; evaluate and report on risks identified through various threat intelligence sources; and perform other duties as assigned. The ability to prioritize, work under deadline, and provide excellent customer service to users will be key qualities. The right individual is detail-oriented, has a technical curiosity and desire to learn, and has solid communication skills to effectively understand the problem areas and escalate where needed. The ability to provide clear instruction to internal customers. Effective team collaboration and communication are critical in this role. The hours for this position are mostly during weekday business hours however; some after-hours work may be required.

What you will do:

• Conduct application vulnerability assessments
• Administer vulnerability scanning infrastructure
• Manage the security vulnerabilities and risks including identifying, supporting application/system owners to manage risks and remediate vulnerabilities
• Support the Application Security Management program across multiple, agile software development teams
• Assess applications for design-related security risks and assist teams in determining appropriate remediation for issues identified
• Ensure security requirements and best practice standards are implemented and adhered to across the program
• Implement and maintain security automation across TVM space
• Drive implementation of threat and vulnerability management tools
• Provide technical analysis of vulnerabilities identified (through scanning, threat intelligence, research, and vendor notifications) to determine their impact, help prioritize, communicate to the relevant partners, and drive an overall timely remediation based on agreed upon internal program governance
• Develop effective strategies for vulnerability remediation and bring to bear technology to orchestrate and automate (where possible)
• Develop skills, technical capabilities, and methods to deliver the best cyber defense capability to protect IT assets from cyber threats, attacks, and exploitation
• Maintain situational awareness of meaningful cyber defense initiatives, indicator lists, threat reports, incident response techniques, and cyber defense technologies to ensure that cyber defenses are effective and incorporating the best protections
• Supports other areas within TVM

What you will bring:

• A degree or industry-recognized certification in intelligence or cybersecurity, or equivalent experience
• Three years work experience in IT and two years of experience in Cybersecurity and/or Application Security
• Ability to perform and manage network vulnerability testing, penetration testing and/or threat assessments.
• Understanding of Cloud Infrastructure and Cloud Security
• Demonstrates understanding of most of the following: Linux/Windows server and application administration, configuration, networking, scripting and automation, large scale distributed computing architecture (client server, cloud, intranet/internet), hardware/operating system/application interaction, and security
• Ability to interpret information security data and processes to identify risk and security threats
• Coding experience a plus, comfort with new technology a must
• Proven analytical and report-writing abilities
• Strong analytical, technical, and problem solving skills.
• Comfortable speaking technically with analysts and strategically with senior executives
• Strong presentation and interpersonal skills
• Able to manage competing priorities and work efficiently under pressure
• Have the ability to organize, plan, prioritize and complete assignments with minimal supervision.
• Knowledge of key best practices, compliance standards or frameworks such as OWASP Top 10, NIST, and SANS Top 20
• Holder of key industry certifications such as CISSP, GIAC certification(s)

This job operates in a professional office environment.

This job description is not intended to be an exhaustive list of all duties, responsibilities and qualifications of the job. The employer has the right to revise this job description at any time. You will be evaluated in part based on your performance of the responsibilities and/or tasks listed in this job description. You may be required to perform other duties that are not included on this job description. The job description is not a contract for employment, and either you or the employer may terminate employment at any time, for any reason, as per terms and conditions of your employment contract.

What we offer you

We offer an array of diverse and inclusive benefits regardless of where you are in your career. We believe that providing our employees with the means to lead healthy balanced lives results in the best possible work performance.

• Medical, dental, vision and life insurance
• Retirement savings – 401(k) plan with generous company matching contributions (up to 6%), financial advisory services, potential company discretionary contribution, and a broad investment lineup
• Tuition reimbursement up to $5,250/year
• Business-casual environment that includes the option to wear jeans
• Generous paid time off upon hire – including a paid time off program plus ten paid company holidays and three floating holidays each calendar year
• Paid volunteer time — 16 hours per calendar year
• Leave of absence programs – including paid parental leave, paid short- and long-term disability, and Family and Medical Leave (FMLA)
• Business Resource Groups (BRGs) – BRGs facilitate inclusion and collaboration across our business internally and throughout the communities where we live, work and play. BRGs are open to all.

Base Salary Range

The salary range above shows the typical minimum to maximum base salary range for this position in the location listed. Non-sales positions have the opportunity to participate in a bonus program. Sales positions are eligible for sales incentives, and in some instances a bonus plan, whereby total compensation may far exceed base salary depending on individual performance. Actual compensation offered may vary from posted hiring range based upon geographic location, work experience, education, licensure requirements and/or skill level and will be finalized at the time of offer.

Equal opportunity employer • Drug-free workplace

We are an equal opportunity employer with a commitment to diversity. All individuals, regardless of personal characteristics, are encouraged to apply. All qualified applicants will receive consideration for employment without regard to age (40 and over), race, color, national origin, ancestry, sex, sexual orientation, gender, gender identity, gender expression, marital status, pregnancy, religion, physical or mental disability, military or veteran status, genetic information, or any other status protected by applicable state or local law.

***For remote and hybrid positions you will be required to provide reliable high-speed internet with a wired connection as well as a place in your home to work with limited disruption. You must have reliable connectivity from an internet service provider that is fiber, cable or DSL internet. Other necessary computer equipment, will be provided. You may be required to work in the office if you do not have an adequate home work environment and the required internet connection.***

Job Posting End Date at 12:01 am on:

Want the latest money news and views shaping how we live, work and play? Stay in the know with The Currency and sign up for Empower’s free newsletter.

Originally posted on Himalayas

Senior Security Engineer - US

About VulnCheck

Exploitation prevention is only as strong as the intelligence driving those efforts, and most of the industry is still running on intelligence that lacks exploit context. VulnCheck, The Exploit Intelligence Company, delivers structured exploit intelligence on what is actively weaponized in the wild, purpose-built for the data lakes, ETL pipelines, automation, and AI and LLM workflows your infrastructure already runs on, raising the capability of everything it powers.

About the Role

We're hiring a Senior Security Engineer to work side-by-side with our engineering team, embedding security into how we build and ship — not bolting it on after the fact. You'll partner with engineers on design reviews, help harden the platform as it grows, and build the tooling and automation that lets security scale without slowing anyone down. You'll report to our VP of Information Security and have real autonomy to identify problems and build the solutions yourself and in collaboration with engineering.

This is a builder's role. In addition to use of vendor tools, you'll be writing code and infrastructure that turns security and compliance work into repeatable, self-service processes for the business helping to automate and improve what's manual today, closing gaps in how we detect and respond to issues, and giving engineering the guardrails and feedback loops they need to move fast safely.

What You'll Do

Partner with Engineering on Platform Security

• Work directly with engineering on design and architecture reviews, threat modeling, and secure-by-default patterns for new services
• Review and harden IaC across our cloud environments (EKS, Aurora, OpenSearch, S3, IAM)
• Lead least-privilege IAM decomposition and drive adoption of stronger identity patterns across the platform
• Support disaster recovery testing and resilience exercises alongside the infrastructure team

Build Tooling That Scales Security

• Design and build automation that turns detection, response, and compliance work into repeatable processes rather than manual effort
• Improve and extend onboarding/offboarding automation, alert triage pipelines, and identity/access anomaly detection
• Build internal tools that give engineering fast, self-service ways to check their own security posture

What You’ll Bring

• 5+ years in security engineering, with real depth in AWS security and Infrastructure-as-Code (Terraform/Terragrunt strongly preferred)
• Firm working knowledge of Kubernetes/EKS security — RBAC, network policies, pod security standards, image scanning, and cluster hardening
• Strong written communication — you'll document your own work, since we're a small, high-trust team
• A track record of building tools or automation that solved a security problem at scale, not just running existing tools
• Previous use of tools like Crowdstrike, Wiz, Security Hub
• Experience with golang
• Comfortable working directly with software engineers — in code reviews, design discussions, and incident response
• Incident investigation and RCA tracking
• Experience supporting a SOC 2 (or similar framework) program from the technical/evidence side
• Experience with Google Workspace as an identity/IdP source of truth
• Self-directed: you'll often be the only engineer working a problem end to end

Preferred Qualifications

• Exposure to offensive security or red/purple teaming
• Familiarity with Aurora or managed OpenSearch specifically

What We Offer

We believe people do their best work when they feel supported, trusted, and valued. VulnCheck offers benefits designed to meet a wide range of needs and lifestyles, tailored to your country of employment:

• Generous, flexible time off
• Retirement/pension plan contributions (e.g., 401k with match in the US; local pension schemes elsewhere)
• Comprehensive healthcare coverage
• Generous paid parental leave
• Remote-friendly environment with flexibility
• Support for home office costs (phone & internet)

Specific benefit details vary by country and are confirmed during the offer process.

Why Join Us

Built on over two decades of cybersecurity experience, our team of experts understands the intricacies of vulnerabilities, their exploitation in the wild, and how to leverage this data to build more effective cybersecurity products that produce better outcomes for organizations.

VulnCheck gives organizations a tactical advantage by providing best-in-class exploit & vulnerability intelligence information. We have a sense of duty to protect the critical infrastructure we rely on including medical devices, power grids and telecommunication networks. We were founded in 2021 in Lexington, Massachusetts.

VulnCheck has a transparent, collaborative, and supportive culture - we are looking for people who have a growth mindset, are curious and innovative. Our team is smart, but humble, hardworking, and supportive.

VulnCheck is proud to be an Equal Employer Opportunity employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. VulnCheck is committed to working with and providing reasonable accommodations to applicants with physical and mental disabilities. *Even if your experience doesn’t perfectly align with the job description, we encourage you to apply—we value potential just as much as a perfect resume.

Originally posted on Himalayas