At Farmers Mutual Hail (FMH), our mission is simple: protect the livelihoods and legacies of America’s farmers through the complete farm insurance solutions we offer. As America’s Crop Insurance Company™, we’re headquartered in the U.S. and have been owned by the farmers we insure for over 125 years.

FMH is seeking an IT Security Specialist to lead advanced security operations, driving security control maturity, and strengthening the organization’s overall security posture. Serves as a technical leader within security, overseeing complex incident investigations, guiding regulatory compliance efforts, optimizing enterprise security technologies, and mentoring junior team members.

BENEFITS

Our employees appreciate our family-oriented culture, and we make sure their benefits reflect that. In addition to a competitive salary and bonuses, medical/dental/vision plan, 401(k) plan with a generous company match, you will be eligible for benefits such as:

Potential for hybrid work schedule after training is completed.
Paid Parental leave and Caregiver leave.
Employee appreciation events.
Employee Assistance Program (EAP) for support when you and your family need it.
On-site cafeteria and fitness center.

REQUIREMENTS

Experience: Seven or more years of progressive experience in cybersecurity, security operations, or related technical roles; or equivalent combination of education and/or experience.
Education: Associate’s degree in Cybersecurity, Information Technology, Computer Science, MIS, or related field required (Bachelor’s degree preferred).
Skills: Demonstrated experience leading incident investigations, administering enterprise security tools, and contributing to regulatory compliance programs. Intermediate or advanced-level security certifications preferred, such as: CompTIA CySA+ or CASP+, GIAC certifications (GCIH, GCED, GCIA, etc.), CISSP (preferred), Cloud security certifications (e.g., CCSP, Azure Security Engineer).

KEY RESPONSIBILITIES

Leads complex security incident investigations, including forensic analysis, root cause determination, and coordination of containment and recovery efforts.
Proactively identifies emerging threats, recommends mitigation strategies, and enhances detection capabilities through improved monitoring logic and alert thresholds to increase threat visibility and reduce false positives.
Provides senior-level administration, configuration, and optimization of enterprise security technologies, including SIEM, EDR/XDR, vulnerability management, email security, identity security, and cloud security solutions.
Evaluates security tool effectiveness, identifies control weaknesses, and recommends improvements to security configurations and technical safeguards aligned with organizational standards and risk tolerance.
Coordinates the enterprise vulnerability management lifecycle, including vulnerability scanning, risk-based prioritization, remediation tracking, validation, exception documentation, and reporting.
Collaborates with IT teams to address identified vulnerabilities and escalates overdue or high-risk findings.
Leads periodic access reviews, privileged access oversight, and identity security improvements across Microsoft Entra ID, Azure, and other enterprise identity management platforms, including multifactor authentication, Conditional Access, privileged identity management, and least-privilege enforcement.
Monitors and evaluates identity security configurations, authentication activities, Azure role-based access controls, application permissions, service principals, managed identities, and privileged access to identify security risks and control deficiencies; coordinates remediation with IT teams and system owners.
Supports compliance with applicable insurance cybersecurity laws, privacy requirements, organizational policies, and adopted security frameworks, including NIST Cybersecurity Framework and CIS Controls.
Maintains security control documentation and audit evidence, identifies control deficiencies, and supports remediation tracking, security policy reviews, risk assessments, third-party evaluations, and regulatory examinations.