Security Engineer

• Train new biosecurity auditors on Orbit’s audit procedures, digital tools, reporting processes, and expectations.
• Create or update training materials, checklists, and reference guides.
• Offer ongoing coaching and answer auditor questions as they arise.
• Review submitted audits for completeness, accuracy, and adherence to Orbit standards.
• Identify inconsistencies, missing information, or deviations from protocol.
• Provide feedback and corrective guidance to auditors when needed.
• Conduct secondary reviews of flagged audits to ensure integrity.
• Serve as the primary support contact for the biosecurity audit team.
• Host periodic remote check-ins to ensure auditors remain aligned with quality expectations.
• Monitor auditor performance metrics and document trends or issues.
• Recommend improvements to audit processes or standards.
• Maintain digital records of auditor performance, quality scores, and audit outcomes.
• Summarize audit trends, compliance gaps, or training needs for leadership.
• Collaborate with management on refining biosecurity audit criteria or tools.

Biosecurity Auditor Team Lead, Part-Time

• Design and implement cybersecurity solutions
• Provide technical expertise and support for cybersecurity solutions
• Lead technical assessments of systems and applications to ensure compliance
• Develop project scope requirements and support model creation
• Collaborate closely with cross functional IT teams

Cybersecurity Engineer II

• Owning our compliance program end to end: driving our annual SOC 2 Type 2 audits from evidence collection through auditor walkthroughs, and running Vanta as our governance home base year-round.
• Completing security questionnaires, addendums, and AI risk assessments for the IT and security teams at our hospital clients — and making sure they understand we're doing the right thing. (Health systems ask great, hard questions. You'll have great answers.)
• Running real BCDR tests and treating them like live incidents to find the gaps before the gaps find us.
• Coordinating annual pen tests and driving remediation of findings within SLA.
• Managing security across our stack: AWS, Heroku, Cloudflare, Google Workspace, GitHub, and our communication tools.
• Administering our laptop fleet for a fully remote team — imaging, shipping, MDM enrollment, inventory, and end-of-life — so every machine is encrypted, managed, and remotely wipeable.
• Running access reviews and enforcing least privilege: pruning admin lists, enforcing SSO and 2FA, and tuning password policies.
• Ensuring new employees get access to everything they need on day one, and departing ones are locked out the same day — partnering with HR and Finance on a tight onboarding/offboarding loop through Rippling and Google.
• Evaluating and securing AI tooling — from how our team uses Claude and MCP servers to partnering with engineering on customer questions about AI risk, bias testing, and model governance.
• Doing vendor management and procurement reviews, and finding savings while you're at it.
• Staying on top of the rapidly evolving AI threat landscape and adapting our defenses and team training as fast as the attackers adapt theirs.
• Playing professor and educating our team on everything security.
• Advising leadership on security matters during project planning, and working with our full stack engineers to ship improvements you identify.
• Being the savior in the event of a security incident — leading response, analysis, and the write-up afterward.
• Supporting co-workers when they manage to put their computers in a bad place. (They should enjoy talking to you, and you to them!)

Senior IT/Security Engineer – AI-native

• Audit, test, or review IT systems, network or application architecture and business processes for compliance with best practices and/or regulatory requirements
• Review and recommend technical, administrative, and physical controls to mitigate identified risk
• Perform risk assessments of IT infrastructure and applications and make recommendations for improvements based on the client’s stated risk tolerance levels
• Develop materials and processes to assist clients with implementing both technical and non-technical controls
• Assist with incident response during security events

Information Security Consultant

• Own and evolve GameChanger's multi-year security and technology strategy, including prioritization, resourcing decisions, alignment to business and parent company goals, and communication of security investments and tradeoffs to technical and executive leadership.
• Lead, mentor, and grow a team of security and technology operations professionals, including setting priorities, coaching teammates, managing performance, creating opportunities for growth and impact, and creating an environment to support autonomy and ownership.
• Own the direction and delivery for all key areas of information security, including product and application security, cloud security, AI security, security operations, vulnerability management, and governance, risk, and compliance functions.
• Evaluate and mitigate risks across infrastructure, product, and corporate environments.
• Set direction for AI security and governance as part of a secure SDLC and corporate environment, including the secure adoption of AI tooling, the security of AI-enabled product features, and AI usage governance, partnering with AI enablement and governance stakeholders across the company.
• Lead the governance, risk, and compliance program, including internal assessments (for example, NIST CSF 2.0), external assessments, and clear risk reporting to leadership.
• Own the security operations and incident response program for the GameChanger environment, including detection, on-call, escalation, and coordination with our parent-company security function.
• Own internal technology operations, including the technology support function for our remote-first workforce and the systems and endpoints employees rely on to do their work.
• Manage the BISO relationship with DSG, including decision rights, shared-services integration, and the partnership with the DSG CISO.
• Lead the cross-departmental security steering committee and represent security and technology in executive forums, building alignment and buy-in for key initiatives.
• Educate and influence the broader company on security principles, threats, and practices.

Director, Information Security – Technology

• Design and implement cybersecurity solutions, upgrades, enhancements
• Provide technical expertise and support for cybersecurity solutions
• Serve as subject matter expert in compliance of secure baseline configurations
• Initiate technical assessments of systems and applications
• Author new cybersecurity standards and procedures
• Serve as technical leader for cybersecurity projects
• Identify threats and develop suitable defense measures
• Lead root-cause analysis on Cyber systems

Cybersecurity Engineer III

• Lead application security design across web, mobile, and AWS cloud-native systems.
• Administer and optimize SAST/SCA tools (e.g., Checkmarx, Snyk).
• Triaging vulnerabilities, and guiding remediation aligned to OWASP Top Ten.
• Secure cloud environments (especially AWS Lambda, API Gateway, IAM, S3).
• Support runtime and application-layer protections.
• Partner with release and change management to ensure secure, stable production deployments.
• Provide security input in architecture and project planning.

Application Security Consultant

• Design and implement secure Azure configurations, guardrails, and reference architectures across identity, network, compute, and data
• Build and enforce policy-as-code and secure-by-default deployment patterns using Azure Policy and infrastructure-as-code
• Own and mature Cloud Security Posture Management (CSPM) , including risk prioritization, remediation, and baseline alignment
• Implement, tune, operate , and optimize cloud security tooling and core security platforms, including Microsoft Defender , WAF, Microsoft Sentinel, Entra ID, CyberArk, CrowdStrike, and related capabilities
• Define and enforce security guardrails for AI usage and secure adoption of AI platforms
• Identify , assess, and mitigate cloud and AI security risks, including misconfigurations, access risks, and emerging threats
• Partner with platform and application security teams to integrate security into CI/CD pipelines and enable secure AI-assisted development practices
• Build automation to improve remediation, monitoring, and compliance reporting at scale
• Partner with engineering teams to translate security strategy into practical, implemented solutions
• Mentor junior engineers and provide technical leadership while serving as a senior escalation point for complex issues

Senior Cloud Security Engineer

• Provides prompt, efficient and friendly customer service by maintaining a safe and secure store environment for customers and employees.
• The retail security officer patrols and monitors premises, and, if needed, apprehending theft suspects in compliance with Hy-Vee's standards and guidelines.
• Exhibiting respect, concern and patience in all customer and employee interactions.
• Monitors the store property, as well as customer and employee activities, for potential theft of assets or damage to assets on Hy-Vee's property.
• Takes appropriate action to prevent theft; apprehends individuals engaged in theft activity.
• Contacts and coordinates with local law enforcement regarding known offenders or suspicious persons observed during duties, parking lot accidents, notifies fire department or ambulance services in case of emergency, maintains public safety within the store.
• Reports unsafe conditions inside and outside of the store to management.
• Reports any internal theft suspicions and observations to Loss Prevention Area Manager.
• Accurately completes all incident reports.
• Assists Loss Prevention with investigations.
• Reports to work when scheduled and works expected number of hours.
• Maintains attendance, dress code and grooming standards according to set guidelines.
• Ensures operation of equipment by completing preventive maintenance requirements, following manufacturer’s instructions, troubleshooting malfunctions and calling for repairs.
• Makes recommendations to Directors regarding loss prevention best practices.
• Attends and participates in store security-related meetings.
• Adheres to Hy-Vee's policies, procedures and individual store guidelines; maintains high ethical standards.

Retail Security Officer

• Provides prompt, efficient and friendly customer service by maintaining a safe and secure store environment for customers and employees.
• The retail security officer patrols and monitors premises, and, if needed, apprehends theft suspects in compliance with Hy-Vee's standards and guidelines.
• Exhibiting respect, concern and patience in all customer and employee interactions.
• Monitors the store property, as well as customer and employee activities, for potential theft of assets or damage to assets on Hy-Vee's property.
• Takes appropriate action to prevent theft; apprehends individuals engaged in theft activity.
• Contacts and coordinates with local law enforcement regarding known offenders or suspicious persons observed during duties, parking lot accidents, notifies fire department or ambulance services in case of emergency, maintains public safety within the store.
• Reports unsafe conditions inside and outside of the store to management.
• Reports any internal theft suspicions and observations to Loss Prevention Area Manager.
• Accurately completes all incident reports.
• Assists Loss Prevention with investigations.

• Find new and creative ways to break technology through either Red Team or Purple Team operations
• Plan, scope, and implement large scale covert operations that have sophisticated goals and significant impact
• Develop new adversary tools, techniques, or methodologies
• Threat Hunting opportunities to partner with the teams Threat Hunters, using our special adversarial talents to discover and eradicate threats
• Engagement in all phases of Red Team security operations
• Work within the Red Team to perform physical exploitation, network exploitation and social engineering assessments against authorized targets
• Perform network reconnaissance and open-source intelligence gathering
• Configure and safely utilize attack tools, tactics, and procedures against authorized targets
• Develop scripts, tools, or methodologies to enhance red teaming capabilities
• Effectively communicate findings and strategy to client stakeholders including technical staff, executive leadership, and legal counsel
• Provide risk-appropriate and pragmatic recommendations to correct identified flaws, vulnerabilities and misconfigurations

Senior Penetration Testing – Red Team

• Join a high-impact security engineering team at the forefront of enterprise cryptography, where you’ll design, build, and scale critical encryption and key management solutions that protect some of the organization’s most sensitive data.
• Work across Linux, Windows, and automation frameworks to harden systems, optimize performance, and drive secure architecture forward—while partnering with engineering and operations teams to deliver resilient, scalable solutions.
• Actively mentor and develop team members by providing technical guidance, sharing best practices, and fostering a culture of continuous learning and security excellence.

Security Engineer jobs in Iowa

See all jobs on JobTailor

Biosecurity Auditor Team Lead, Part-Time

Cybersecurity Engineer II

Senior IT/Security Engineer – AI-native

Information Security Consultant

Director, Information Security – Technology

Cybersecurity Engineer III

Application Security Consultant

Senior Cloud Security Engineer

Retail Security Officer

Retail Security Officer

Senior Penetration Testing – Red Team

Lead Security Encryption Engineer

Senior Red Operation, Team Penetration Testing Analyst