Our vision for the future is based on the idea that transforming financial lives starts by giving our people the freedom to transform their own. We have a flexible work environment, and fluid career paths. We not only encourage but celebrate internal mobility. We also recognize the importance of purpose, well-being, and work-life balance. Within Empower and our communities, we work hard to create a welcoming and inclusive environment, and our associates dedicate thousands of hours to volunteering for causes that matter most to them.

Chart your own path and grow your career while helping more customers achieve financial freedom. Empower Yourself.

Lead Security Engineer

The Lead Security Engineer is a hands-on technical lead responsible for enterprise network and cloud security across Palo Alto Networks, proxy, WAF, and AWS/Azure environments. This role leads security operations, advanced troubleshooting, incident response, root cause analysis, security implementation, and technical mentoring.

What You Will Do

• Lead Palo Alto Networks firewall operations, configuration, advanced troubleshooting, incident response, escalations, and root cause analysis, including App-ID, User-ID, Threat Prevention, content filtering, and Prisma Access.
• Implement and troubleshoot enterprise proxy solutions, including policy configuration, SSL/TLS inspection, authentication integration, and incident resolution.
• Deploy, configure, and support WAF solutions, including Web ACLs, rule tuning, log analysis, false-positive management, attack investigation, and emergency blocking.
• Lead AWS or Azure cloud security and network troubleshooting, including IAM, Security Groups/NSGs, NACLs, VPC/VNet routing, VPNs, peering, WAF, logging, and key management.
• Lead security incidents, evaluate security controls, recommend remediation, and provide technical mentoring to security engineers.

What You Will Bring

• Bachelor's degree in Information Technology, Computer Science, or a related field.
• 8–10 years of information technology or related experience.
• 4+ years of hands-on Palo Alto Networks firewall experience, including operations, configuration, advanced troubleshooting, incident response, escalations, and root cause analysis.
• Preferred for Palo Alto Networks certification.
• AWS or Azure experience, including cloud security and network troubleshooting.
• 4+ years of WAF experience, including deployment, configuration, operations, troubleshooting, rule tuning, and incident handling.
• Hands-on enterprise proxy security experience, including implementation, policy administration, SSL/TLS inspection, authentication integration, configuration changes, and troubleshooting.
• Strong experience with Palo Alto Networks, Prisma Access, IDS/IPS, WAF, IAM, Security Groups/NSGs, NACLs, VPC/VNet, VPN, network peering, TCP/IP, and SSL/TLS.
• Experience with cloud security technologies such as GuardDuty, Security Hub, Microsoft Defender for Cloud, CloudTrail/Activity Logs, and KMS/Key Vault, as applicable to AWS or Azure.
• 3+ years of programming/scripting experience with Python and shell scripting.
• Ability to participate in a 24x7 on-call rotation.

We are an equal opportunity employer with a commitment to diversity.  All individuals, regardless of personal characteristics, are encouraged to apply.  All qualified applicants will receive consideration for employment without regard to age, race, color, national origin, ancestry, sex, sexual orientation, gender, gender identity, gender expression, marital status, pregnancy, religion, physical or mental disability, military or veteran status, genetic information, or any other status protected by applicable state or local law.