Information Security Engineer

SECURA Insurance Company; Neenah, Northern (WI, KY); Hybrid; USD 110,000 - 150,000; Full time

Job summary

SECURA Insurance Company seeks an Information Security Engineer to design, implement, and maintain safeguards protecting systems, networks, and data. You will evaluate security technologies, respond to incidents, and collaborate with IT and business teams to ensure secure architecture and operations.

The role emphasizes proactive security posture improvement and requires strong experience in security tooling, incident handling, and cross-functional collaboration.

Qualifications

• Five or more years in IT security or ten+ years in AppDev/Infra engineering.
• Confidential handling of SECURA internal affairs is required.
• College degree in IT/security or relevant field preferred.

Responsibilities

• Configure, monitor, and support security software and systems.
• Develop technical security solutions and automate repetitive tasks.
• Lead security tool implementations with cross-functional teams.
• Embed security into system designs and DevOps pipelines.
• Document procedures and contribute to security policy.

Skills

Security engineering

Threat detection

Incident response

Collaboration with IT/business

Education

B.A. Information Systems or B.S. Computer Science

Tools

CISSP

GIAC

CEH

OSCP

Job description

The Information Security Engineer is responsible for designing, implementing, and maintaining the technical safeguards that protect the organization’s systems, networks, and data. This role involves evaluating security technologies, responding to incidents, and collaborating with IT and business teams to ensure secure architecture and operations. The engineer plays a key role in proactively enhancing the organization’s overall security posture. This is a hybrid role, with the associate required to be in the office 3 days per week.

RESPONSIBILITIES:

• Configure, implement, monitor, and support security software/systems that will help ensure compliance with policies and procedures. This may include but is not limited to SIEM, Next Gen Firewall Management, Multi-Factor Authentication, Identity Management, Internal/External Certificate Authority, Network Access Control, Cloud access controls, Vulnerability Management, AppDev security and monitoring, etc
• Assists with the definition of requirements for security technologies to application/data security, encryption, authentication systems, identity management, and access control
• Develop technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks
• Document security procedures and contribute to policy development
• Assists in the development, execution and/or coordination of Security Architecture Reviews, Secure Network Design, Threat & Risk Investigations, Incident Response and Documentation, DNS, Registrar Management, etc
• Assist in the identification, response, investigation, and remediation of potential breaches of and issues surrounding data security
• Collaborate with infrastructure and application teams to embed security into system designs and DevOps pipelines
• Proactively identifies security problems, monitors performance trends, performs upgrades, and makes recommendations for security hardware and software as required
• Maintain job knowledge by tracking and understanding emerging security practices and standards; participating in educational opportunities; reading professional publications; and participating in professional organizations
• Responsible for providing off hours support for security as needed
• Act as project lead for security tools implementations, which may include cross-functional teams
• Provide education to teammates, interns, and other teams regarding specific initiatives or
• InfoSec areas of importance
• Other duties as assigned

QUALIFICATIONS:

ESSENTIAL:

• Five or more years of experience working in an Information Technology security capacity or ten or more years working in AppDev or Infrastructure engineering role.
• Demonstrate the ability to maintain strict confidentiality of SECURAs internal affairs

PREFERRED:

• A college degree (i.e. B.A. Information Systems or B.S. Computer Science)
• One or more information security certifications (i.e. CISSP, GIAC, CEH, OSCP)
• Understanding of ISO27001/NIST principles
• Experience administering Identity and Access Management solutions
• Knowledge of cloud security
• Understanding of the current security threat landscape and ability to demonstrate a strong willingness to stay at the forefront of security developments
• Experience with vulnerability assessment, scanning, and ethical penetration testing
• Knowledge of multiple operating system internals and hardening
• Experience with security policies and procedures, awareness programs, and IT audits
• Highly motivated and dependable self-starter
• Coding or scripting ability

At SECURA, we are transforming the insurance experience by putting authenticity at the forefront of everything we do. Our mission is clear: we’re making insurance genuine. We recognize that our associates are our greatest assets, and we invest in their well-being and professional growth. We offer opportunities for continuous learning and career advancement, competitive benefits , and a culture that champions work-life balance. Joining SECURA means becoming part of a dynamic team that values everyone's contribution and fosters a collaborative atmosphere. Here, you’ll not only find a fulfilling career but also a place where you can make a positive impact every day.

SECURA Insurance strives to provide equal opportunity for all employees and is committed to fostering an inclusive work environment. We welcome applicants from all backgrounds and walks of life.

Equal Opportunity Employer
This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.