Empower Pharmacy is a visionary healthcare company dedicated to making quality, affordable medication accessible to millions of patients nationwide. The Staff Cybersecurity Engineer delivers enterprise-critical protection of digital assets, focusing on threat detection, incident response, and security engineering across cloud and application environments.
Responsibilities:
- Threat Detection: Lead real-time monitoring and analysis across SIEM, XDR, and AI-driven security platforms to identify, triage, and mitigate advanced threats, improving detection accuracy and reducing dwell time
- Incident Response: Execute and coordinate complex incident response activities using AI-enabled correlation and automation tools to accelerate containment, investigation, and recovery while maintaining compliance and forensic integrity
- Threat Hunting: Conduct proactive, intelligence-led threat hunting using behavioral analytics, MITRE ATT&CK frameworks, and AI-driven anomaly detection to uncover hidden threats and strengthen defensive posture
- Security Architecture: Design, implement, and optimize security controls across cloud platforms including AWS, Azure, and GCP, enforcing Zero Trust principles and enhancing identity-based protections
- Automation Engineering: Develop and maintain SOAR-driven automation workflows and AI-enabled orchestration to streamline detection and response processes and improve operational efficiency
- Vulnerability Management: Execute risk-based vulnerability management programs using AI-powered prioritization to identify, assess, and remediate security weaknesses
- Regulatory Alignment: Support and maintain alignment with regulatory frameworks such as HIPAA, GDPR, NIST, and ISO, ensuring controls are effective, audit-ready, and compliant
- Risk Assessment: Perform detailed risk assessments using data analytics and AI modeling to evaluate threats, vulnerabilities, and business impact
- Control Validation: Continuously test and validate security controls using automated tools and simulation techniques to ensure effectiveness and drive remediation efforts
Requirements:
- 8+ years of experience in cybersecurity, including security operations, incident response, and threat detection in cloud and hybrid environments
- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field
- Advanced expertise in SIEM, SOAR, XDR, and AI/ML-driven cybersecurity platforms, with the ability to operationalize automation
- Strong knowledge of cloud security architecture across AWS, Azure, and GCP, including identity management and Zero Trust frameworks
- Proficiency in scripting and automation using Python, PowerShell, or similar languages
- Deep understanding of regulatory frameworks and risk management methodologies
- Experience with DevSecOps practices, CI/CD security integration, and application security tools such as SAST, DAST, and SCA
- Familiarity with threat intelligence platforms and adversary tactics, techniques, and procedures
- Knowledge of AI-related security risks, including prompt injection, model poisoning, and data privacy concerns
- Master's degree in Cybersecurity, Computer Science, Information Technology, or related field
- Preferred certifications include CISSP, CISM, GIAC certifications (e.g., GCIA, GCIH), CCSP, cloud provider security certifications, or CEH