Associate Security Analyst

Our vision for the future is based on the idea that transforming financial lives starts by giving our people the freedom to transform their own. We have a flexible work environment, and fluid career paths. We not only encourage but celebrate internal mobility. We also recognize the importance of purpose, well-being, and work-life balance. Within Empower and our communities, we work hard to create a welcoming and inclusive environment, and our associates dedicate thousands of hours to volunteering for causes that matter most to them.

Chart your own path and grow your career while helping more customers achieve financial freedom. Empower Yourself.

***Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa at this time, including CPT/OPT.***

The Associate Security Analyst will support and strengthen the organization’s information security program by helping protect systems, applications, infrastructure, data, and operations. This role will assist with security policies, controls, risk identification, remediation support, compliance activities, and day to day security processes across modern infrastructure, including cloud platforms and containerized environments.

What you will do:

• Assist in the development, implementation, maintenance, and documentation of information security policies, standards, procedures, controls, and baseline configurations aligned with industry best practices such as NIST and CIS.
• Support security functions intended to protect the organization’s systems, applications, infrastructure, data, and operations.
• Assist in securing modern infrastructure, including cloud platforms and containerized environments.
• Learn and contribute to container security practices, including image scanning, runtime protections, and workload hardening.
• Identify, analyze, document, and help address security risks, vulnerabilities, issues, findings, and control gaps across systems, applications, and infrastructure.
• Collaborate with internal teams, senior analysts, and engineers to support remediation efforts, compensating controls, and the adoption of secure practices.
• Assist with monitoring, testing, and maintaining security controls, related processes, and corporate systems in alignment with established policies and controls.
• Support compliance, audit, and regulatory activities, including internal and external audit readiness, through documentation, evidence gathering, and control validation.
• Contribute to security automation efforts, including scripting and tooling, primarily in Python, and support identity and access management processes such as SSO, IAM, and role based access controls.
• Stay current on information security practices, technologies, certifications, and emerging threats, and perform other related duties as assigned.

What you will bring:

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or a related field, or equivalent hands on experience through internships, labs, projects, or prior work.
• 0 to 2 years of experience in information security, information technology, or a related technical field.
• Basic knowledge of information security concepts, principles, and best practices, including core concepts such as least privilege, authentication, and encryption.
• Familiarity with security controls, standards, and technical environments commonly used to support business operations.
• Ability to identify, analyze, and document security risks, issues, and findings.
• Exposure to security, systems, networking, cloud, or infrastructure concepts through education, certifications, internships, or work experience.
• Basic technical and analytical skills, including troubleshooting, problem solving, and the ability to learn new technologies, processes, and security practices in a changing environment.
• Effective written and verbal communication skills, with the ability to collaborate across teams.

What will set you apart:

• Entry level certifications such as CompTIA Security+, Network+, CCNA, Linux+, or equivalent foundational cloud or security certifications.
• Exposure to cloud platforms such as AWS, Azure, or GCP.
• Familiarity with containers through academic, lab, or personal project experience.
• Basic scripting experience, with Python preferred and Bash or similar acceptable.
• Awareness of identity technologies such as Active Directory, SSO, SAML, and OAuth.
• Understanding of system or infrastructure hardening concepts.
• Exposure to compliance or regulated environments.

This job description is not intended to be an exhaustive list of all duties, responsibilities and qualifications of the job.  The employer has the right