IT Security Engineer

🔥 16 hours ago

🇺🇸 United States – Remote

💵 $115k - $125k / year

⏰ Full Time

🟢 Junior

🟡 Mid-level

👮‍♂️ Cybersecurity / Security Engineer

🚫👨‍🎓 No degree required

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

ClassLink

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 1998

📚 Education

🔒 Cybersecurity

☁️ SaaS

💰 Venture Round on 2007-03

Education • Cybersecurity • SaaS

ClassLink is a company providing educational technology solutions that focus on identity and access management for schools. Their services include identity and access management, learning analytics, and cybersecurity with features such as single sign-on and multi-factor authentication, tailored for K-12 and higher education institutions. ClassLink aims to create a secure and efficient digital learning environment, enhancing education through improved access to technological resources and data-driven insights.

📋 Description

• Own internal security controls against FedRAMP, ISO 27001, SOC 2 Type II, and GovRAMP requirements • Map controls to systems and maintain a unified control inventory • Run gap assessments, track remediation, and maintain year-round audit readiness • Evaluate vendors, SaaS platforms, AI services, browser extensions, integrations, and other technologies • Maintain vendor risk records • Conduct access, privileged-account, device compliance, and SaaS permission reviews • Design, implement, and document identity, access, logging, vulnerability management, encryption, and configuration controls • Configure and monitor EDR, SIEM, identity, access management, MFA, DLP, encryption, and related security tools • Own audit controls, evidence requests, and remediation items assigned to IT Operations • Serve as the technical contact for auditors and assessors • Monitor systems and network activity, investigate alerts, conduct threat hunting, and coordinate incident response and post-incident reviews • Identify, prioritize, and track vulnerability remediation • Partner with the Systems Engineer on endpoint, network, firewall, VPN, DNS filtering, and Zero Trust security requirements • Establish security standards, hardening guidelines, policies, baseline configurations, and technical documentation • Participate in change control and review security impacts of system and application changes • Automate recurring security checks and evidence collection with PowerShell or Python • Develop security metrics and report risks, trends, remediation progress, and security posture • Report control status, findings, and audit readiness to leadership • Create security awareness programs and advise employees and cross-functional teams • Maintain a roadmap for strengthening ClassLink’s internal security environment

🎯 Requirements

• Hands-on experience owning security controls through a SOC 2 Type II audit, or equivalent FedRAMP, GovRAMP, or ISO 27001 experience, including owning IT-team controls and working directly with auditors • Experience conducting vendor and third-party security risk assessments before adoption • 2+ years of experience in a dedicated security role • Hands-on experience with SIEM, EDR, security monitoring, incident response, and vulnerability management • Strong knowledge of endpoint, network, identity, access, and data security practices • Experience with firewalls, VPN, DNS filtering, Zero Trust, MFA, encryption, and DLP • Working knowledge of Active Directory, SAML, OpenID Connect, and OAuth • Experience with PowerShell or Python scripting for security automation • Familiarity with NIST, CIS Controls, SOC 2, and ISO 27001 • Strong analytical, problem-solving, communication, and cross-functional collaboration skills • Ability to independently resolve security issues • Ability to prioritize competing audit, incident, and project work with little day-to-day direction • Ability to balance daily security responsibilities with longer-term initiatives • Bachelor’s degree in information security, cybersecurity, or a related field is preferred; equivalent education and relevant experience considered • Preferred certifications include ISO 27001 Lead Implementer or Lead Auditor, CISSP, CISM, CISA, or CompTIA Security+

🏖️ Benefits

• 4+ weeks of vacation • 13+ paid holidays • 12 weeks fully paid parental leave for all parents • 401(k) with 0.5:1 company match • Medical, dental, and vision plans • Company-paid life, short-term disability, and long-term disability insurance • Voluntary supplemental life, accident, and pet insurance • Paid volunteer days through ClassLink Cares • Tuition reimbursement for continued education • Coaching and internal programs supporting career and personal growth • Annual company retreats and team events