Information Security Engineer Internship - Des Moines, IA (Summer 2027)

Principal Financial Group•Des Moines, IA

9d•Hybrid

About The Position

Our Technology & Engineering internship program offers opportunities for 100+ interns and has a strong reputation with over 20 years of history. You’ll work on real projects collaborating with a range of team members from other interns through senior level management. We'll place you in a role customized to your expertise and interests all while working in an Agile team environment. You'll be assigned a formal leader and mentor to help guide you through the program. This is an excellent opportunity to understand and learn more about Principal’s Technology Engineering culture. Operating at the intersection of financial services and technology, Principal builds financial tools that help our customers live better lives. We take pride in being a purpose-led firm, motivated by our mission to make financial security accessible to all. Our mission, integrity, and customer focus have made us a trusted leader for more than 140 years. As an Information Security Engineer Intern, team alignment could be within one of the following areas: Cyber Defense Operations Serves as the front line of cyber defense by monitoring, detecting, investigating, and responding to potential security threats and vulnerabilities across Principal’s networks, systems, and applications. Governance, Risk, and Compliance (GRC) Partners with business and technology teams to establish security policies, standards, and controls. This team helps identify, assess, and manage information security risks while providing insight into the organization’s overall risk posture. Identity and Access Management Designs, implements, and supports enterprise identity, authentication, and access management solutions that help ensure users have secure and appropriate access to company resources. Insider Risk Monitors and analyzes user activity to identify potential insider threats, policy violations, and risky behaviors. The team works to strengthen prevention, detection, investigation, and response capabilities to protect the organization from internal risks. Data Protection Safeguards sensitive information by implementing controls and technologies that help ensure data is securely stored, accessed, shared, and transmitted across the organization. Security Automation Develops and maintains automated solutions that improve the efficiency and effectiveness of security operations. The team leverages automation, orchestration, and integrations to streamline workflows and reduce manual effort.

Requirements

Currently pursuing or have completed an undergraduate degree program - in a preferred science, technology, engineering, or math-related field of study
Involvement in student organizations on your respective campus, within the community, or have prior internship experience
Exceptional communication and organizational skills and a strong work ethic
Passion for technology including technical curiosity and ability to think critically and solution for technology-based problems

Nice To Haves

Interest in and/or experience with information security technologies, tools, and concepts
Leadership experience in student, professional, or community organizations
Previous IT internship or relevant work experience
Proven continuous learning through certifications, training, research, or other non-traditional learning paths
Technical experience with: Programming and/or scripting languages
Technical experience with: Automation tools
Technical experience with: Cloud platforms and cloud security concepts
Technical experience with: DevOps or Agile methodologies
Technical experience with: Cybersecurity frameworks and standards

Responsibilities

Monitoring, detecting, investigating, and responding to potential security threats and vulnerabilities across Principal’s networks, systems, and applications.
Partnering with business and technology teams to establish security policies, standards, and controls.
Identifying, assessing, and managing information security risks.
Designing, implementing, and supporting enterprise identity, authentication, and access management solutions.
Monitoring and analyzing user activity to identify potential insider threats, policy violations, and risky behaviors.
Strengthening prevention, detection, investigation, and response capabilities to protect the organization from internal risks.
Safeguarding sensitive information by implementing controls and technologies.
Developing and maintaining automated solutions that improve the efficiency and effectiveness of security operations.
Leveraging automation, orchestration, and integrations to streamline workflows and reduce manual effort.