Note: The job is a remote job and is open to candidates in USA. Edmentum develops technology-enabled learning solutions. The Information Security Engineer helps protect student data, educator tools, and platform infrastructure through security operations, incident response, vulnerability remediation, compliance support, and collaboration with Technology teams.
Responsibilities
- Monitor production systems for security events, take part in incident response, and help keep Edmentum's data and infrastructure secure and available
- Run vulnerability assessments, drive remediation, and apply proven risk frameworks to close security gaps
- Support compliance with FERPA, COPPA, GDPR, NIST, and SOC 2, helping keep Edmentum audit-ready
- Evaluate and administer security tools, and explore emerging technologies, including AI, to strengthen our defenses
- Partner with development, systems, and network teams to build security into how we build and operate
- Improve change management, configuration management, and security metrics, and help find root causes after incidents
Skills
- You have 3 to 5 years of experience supporting and securing enterprise IT infrastructure, ideally in a SaaS environment
- You have a bachelor's degree in a technology-related field or equivalent hands-on experience
- You have a solid grasp of core security principles and experience securing enterprise infrastructure, operating systems, and platforms
- You have hands-on experience with vulnerability scanning, assessment, and remediation
- You are familiar with frameworks and regulations such as NIST CSF, NIST 800, ISO 27001, SOC 2, FERPA, COPPA, and GDPR, and can apply them to real-world work
- You understand SDLC methodologies, including Waterfall and Agile, and how to build security into them
- You are a clear communicator and strong collaborator who works well independently and with teams at every level
- You have, or are working toward, certifications such as CISA, CISSP, or PMP
- You have a passion for learning and stay current on evolving security threats, tools, and best practices
- You are willing to take on evolving responsibilities based on business needs
- You have exposure to offensive security, such as penetration testing, red teaming, or application security (a plus)
- You have experience with AI systems and AI-specific risks such as prompt injection and insecure agent behavior (a plus)
Benefits
- Medical, dental, and vision insurance with various plan options
- A 401(k) retirement plan with company matching
- A time away program
- Volunteer time away
- A winter office closure at the end of December
- Resources to promote wellness
- Remote First organization
Company Overview
Company H1B Sponsorship