As an imperative member of the Grinnell Mutual team the Information Security Engineer safeguards information system assets by identifying and solving potential and actual security problems. This role will identify abnormalities, report violations and research current and future technologies, provide recommendations for improvement and ensure the implementation of technologies meet the business goals and secure architecture.

Position can be performed in our Grinnell or West Des Moines Office; or Work-From-Home if based in one of the following states: Illinois, Indiana, Iowa, Minnesota, Missouri, Nebraska, North Carolina, North Dakota, Montana, Ohio, Oklahoma, Pennsylvania, South Dakota and Wisconsin.

• Develops and carries out information security plans and policies.

• Develops strategies to respond to and recover from a security breach. Investigates security breaches.

• Delivers awareness training to the workforce on information security standards, policies and best practices.

• Implements network and application protections.

• Installation and use of firewalls, data encryption and other security products and procedures.

• Conducts periodic network scans to find any vulnerability and conducts penetration testing, simulating an attack on the system to find exploitable weaknesses.

• Monitors networks and systems for security breaches, through the use of software that detects intrusions and anomalous system behavior.

• Leads incident response, including steps to minimize the impact and then conducts a technical and forensic investigation into how the breach happened and the extent of the damage.

• Provides engineering support to integrate security and compliance requirements into all enterprise information systems and projects as part of the SDLC process by working closely with various IT areas.