Note: The job is a remote job and is open to candidates in USA. ClassLink is seeking an IT Security Engineer to secure its employee-facing SaaS applications, identity platforms, integrations, and AI services, and maintain internal security controls for FedRAMP, ISO 27001, SOC 2 Type II, and GovRAMP. The role owns day-to-day security operations, audit readiness, compliance, vendor risk, and security awareness for the corporate technology environment.
Responsibilities
- Own ClassLink’s internal security controls against FedRAMP, ISO 27001, SOC 2 Type II, and GovRAMP (formerly StateRAMP) requirements. Map each control to our systems and keep one control inventory that covers every framework
- Run gap assessments against each framework, track remediation to closure, and keep our security posture audit ready all year, not only during audit season
- Evaluate the security of vendors, SaaS platforms, AI services, browser extensions, integrations, and other technologies before adoption against our control requirements, and maintain our vendor risk records
- Conduct access reviews, privileged-account reviews, device compliance audits, and SaaS application permission reviews
- Design, implement, and document the technical controls (identity, access, logging, vulnerability management, encryption, and configuration) needed to satisfy those frameworks
- Own the configuration and monitoring of EDR, SIEM, identity, access management, MFA, DLP, encryption, and related security tools
- Own every audit control, evidence request, and remediation item assigned to the IT Operations team, and serve as the main technical contact for auditors and assessors during readiness reviews and audits
- Monitor systems and network activity, investigate alerts, conduct threat hunting, and coordinate incident response and post-incident reviews
- Identify and prioritize vulnerabilities, and track remediation to closure with the Systems Engineer and the teams that own each system
- Partner with the Systems Engineer to set and verify security requirements for corporate endpoints, networks, firewalls, VPN, DNS filtering, and Zero Trust access
- Establish and maintain security standards, hardening guidelines, policies, baseline configurations, and technical documentation
- Participate in change control and review the security impact of changes to systems and applications, keeping records for audits
- Automate recurring security checks and evidence collection with scripting (PowerShell or Python)
- Develop security metrics and report on risks, trends, remediation progress, and the organization’s overall security posture
- Report control status, open findings, and audit readiness to leadership on a regular schedule
- Create security awareness programs and serve as a trusted resource for employees and cross-functional teams
- Develop and maintain a roadmap for strengthening ClassLink’s internal security environment
Skills
- Hands-on experience owning security controls through a SOC 2 Type II audit, or an equivalent such as FedRAMP, GovRAMP (formerly StateRAMP), or ISO 27001, including owning the controls and evidence typically assigned to the IT team and working directly with auditors
- Experience conducting vendor and third party security risk assessments before adoption
- 2+ years of experience in a dedicated security role, with security as the primary job function
- Hands-on experience with SIEM, EDR, security monitoring, incident response, and vulnerability management
- Strong knowledge of endpoint, network, identity, access, and data security practices
- Experience with firewalls, VPN, DNS filtering, Zero Trust, MFA, encryption, and DLP
- Working knowledge of Active Directory, Security Assertion Markup Language (SAML), OpenID Connect, and OAuth
- Experience with scripting (PowerShell or Python) to automate security checks and evidence collection
- Familiarity with security and compliance frameworks such as NIST, CIS Controls, SOC 2, and ISO 27001
- Strong analytical, problem-solving, communication, and cross-functional collaboration skills, with the ability to independently resolve security issues
- Ability to prioritize competing audit, incident, and project work with little day-to-day direction
- Ability to balance daily security responsibilities with longer-term security initiatives
- Working knowledge of National Institute of Standards and Technology 800-53 controls and how they map across these frameworks
- Bachelor's degree in information security, cybersecurity, or a related field; equivalent education and relevant experience will also be considered
- Experience securing Microsoft 365, Microsoft Entra ID, Google Workspace, and enterprise SaaS applications as well as employee endpoints
- ISO 27001 Lead Implementer or Lead Auditor, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), or CompTIA Security+
Benefits
- Primarily remote, with up to 10% travel for company meetings, events, or other business needs.
- 4+ weeks of vacation and 13+ paid holidays
- 12 weeks fully paid parental leave for all parents
- 401(k) with 0.5:1 company match
- Medical, dental, and vision plans
- Company-paid life, short-term disability, and long-term disability, plus voluntary options including supplemental life, accident, and pet insurance
- Paid volunteer days through ClassLink Cares
- Tuition reimbursement for continued education
- Coaching and internal programs to support career and personal growth
- A workplace that values curiosity, compassion, and continuous learning
- Annual company retreats and team events
Company Overview
Company H1B Sponsorship