IT Security Specialist

West Des Moines, IA

5 days ago

Job Description

At Farmers Mutual Hail (FMH), our mission is simple: protect the livelihoods and legacies of America's farmers through the complete farm insurance solutions we offer. As America's Crop Insurance Company, we're headquartered in the U.S. and have been owned by the farmers we insure for over 125 years.

FMH is seeking an IT Security Specialist to lead advanced security operations, driving security control maturity, and strengthening the organization's overall security posture. Serves as a technical leader within security, overseeing complex incident investigations, guiding regulatory compliance efforts, optimizing enterprise security technologies, and mentoring junior team members.

BENEFITS:

Our employees appreciate our family-oriented culture, and we make sure their benefits reflect that. In addition to a competitive salary and bonuses, medical/dental/vision plan, 401(k) plan with a generous company match, you will be eligible for benefits such as:

Potential for hybrid work schedule after training is completed.
Paid Parental leave and Caregiver leave.
Employee appreciation events.
Employee Assistance Program (EAP) for support when you and your family need it.
On-site cafeteria and fitness center.

REQUIREMENTS:

Experience: Seven or more years of progressive experience in cybersecurity, security operations, or related technical roles; or equivalent combination of education and/or experience.
Education: Associate's degree in Cybersecurity, Information Technology, Computer Science, MIS, or related field required (Bachelor's degree preferred).
Skills: Demonstrated experience leading incident investigations, administering enterprise security tools, and contributing to regulatory compliance programs. Intermediate or advanced-level security certifications preferred, such as: CompTIA CySA+ or CASP+, GIAC certifications (GCIH, GCED, GCIA, etc.), CISSP (preferred), Cloud security certifications (e.g., CCSP, Azure Security Engineer).

KEY RESPONSIBILITIES:

Leads complex security incident investigations, including forensic analysis, root cause determination, and coordination of containment and recovery efforts.
Proactively identifies emerging threats, recommends mitigation strategies, and enhances detection capabilities through improved monitoring logic and alert thresholds to increase threat visibility and reduce false positives.
Provides senior-level administration, configuration, and optimization of enterprise security technologies, including SIEM, EDR/XDR, vulnerability management, email security, identity security, and cloud security solutions.
Evaluates security tool effectiveness, identifies control weaknesses, and recommends improvements to security configurations and technical safeguards aligned with organizational standards and risk tolerance.
Coordinates the enterprise vulnerability management lifecycle, including vulnerability scanning, risk-based prioritization, remediation tracking, validation, exception documentation, and reporting.
Collaborates with IT teams to address identified vulnerabilities and escalates overdue or high-risk findings.
Leads periodic access reviews, privileged access oversight, and identity security improvements across Microsoft Entra ID, Azure, and other enterprise identity management platforms, including multifactor authentication, Conditional Access, privileged identity management, and least-privilege enforcement.
Monitors and evaluates identity security configurations, authentication activities, Azure role-based access controls, application permissions, service principals, managed identities, and privileged access to identify security risks and control deficiencies; coordinates remediation with IT teams and system owners.
Supports compliance with applicable insurance cybersecurity laws, privacy requirements, organizational policies, and adopted security frameworks, including NIST Cybersecurity Framework and CIS Controls.
Maintains security control documentation and audit evidence, identifies control deficiencies, and supports remediation tracking, security policy reviews, risk assessments, third-party evaluations, and regulatory examinations.
Leads technical security process improvements, develops control procedures, and supports incident response exercises and security initiatives.
Provides mentorship and technical guidance to Security Specialists I and II and serves as a security subject matter expert, collaborating with IT, compliance, and business teams to strengthen security practices and awareness.

This position is not eligible for sponsorship for work authorization by Farmers Mutual Hail Insurance Company, SI. Therefore, if you will require sponsorship for work authorization now or in the future, we cannot consider your application at this time.

Farmers Mutual Hail Insurance Company does not discriminate in employment (EOE). All qualified applicants are encouraged to apply.

Numbers & Facts

Location

West Des Moines, IA

Skills

Access Controlunmatched
Authenticationunmatched
CCSP - Cisco Certified Security Professionalunmatched
CISSP - Certified Information Systems Security Professionalunmatched
Cloud Computingunmatched
CompTIA - Computing Technology Industry Associationunmatched
Computer Scienceunmatched
Computer Securityunmatched
Document Managementunmatched
Email Securityunmatched
Employee Assistance Planunmatched
Enterprise Protectionunmatched
Establish Prioritiesunmatched
Fitnessunmatched
Forensic Scienceunmatched
GCIA - GIAC Certified Intrusion Analystunmatched
GCIH - GIAC Certified Incident Handlerunmatched
GIAC - Global Information Assurance Certificationunmatched
Identity Data Managementunmatched
Incident Responseunmatched
Information Technology & Information Systemsunmatched
Insuranceunmatched
Insurance Regulationsunmatched
Internet Securityunmatched
Leadershipunmatched
Management of Information Systems/Technology (MIS)unmatched
Mentoringunmatched
Microsoft Access Databaseunmatched
Microsoft Product Familyunmatched
Microsoft Windows Azureunmatched
Operations Security (OPSEC)unmatched
Privacy Regulationsunmatched
Procedure Developmentunmatched
Process Developmentunmatched
Process Improvementunmatched
Product Lifecycleunmatched
Regulationsunmatched
Regulatory Complianceunmatched
Riskunmatched
Risk Analysisunmatched
Risk Managementunmatched
Root Cause Analysisunmatched
Security Information and Event Management (SIEM)unmatched
Security Monitoringunmatched
Security Policyunmatched
System Integration (SI)unmatched
Technical Leadershipunmatched
U.S. National Institute of Standards and Technology (NIST)unmatched
Validation Documentationunmatched
Vulnerability Scannersunmatched

Level up your application

Professional resume templates

Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.

Free resume templates

Resume Builder

Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.

Resume Builder