IT Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Take ownership of internal security controls in alignment with FedRAMP, ISO 27001, SOC 2 Type II, and GovRAMP standards.

• Align controls with systems and maintain a comprehensive inventory of controls.

• Conduct gap assessments, oversee remediation efforts, and ensure continuous audit readiness throughout the year.

• Assess vendors, SaaS platforms, AI services, browser extensions, integrations, and various technologies.

• Keep vendor risk documentation up to date.

• Perform reviews of access, privileged accounts, device compliance, and SaaS permissions.

• Design, implement, and document controls for identity, access, logging, vulnerability management, encryption, and configuration.

• Configure and monitor security tools such as EDR, SIEM, identity and access management, MFA, DLP, and encryption.

• Manage audit controls, evidence requests, and remediation tasks assigned to IT Operations.

• Act as the technical liaison for auditors and assessors.

• Monitor systems and network activities, investigate alerts, conduct threat hunting, and coordinate incident response along with post-incident evaluations.

• Identify, prioritize, and track the remediation of vulnerabilities.

• Collaborate with the Systems Engineer on security needs related to endpoints, networks, firewalls, VPNs, DNS filtering, and Zero Trust frameworks.

• Develop security standards, hardening guidelines, policies, baseline configurations, and technical documentation.

• Engage in change control processes and assess the security implications of system and application updates.

• Automate routine security checks and evidence gathering using PowerShell or Python.

• Create security metrics and report on risks, trends, remediation progress, and overall security posture.

• Communicate control status, findings, and audit readiness to leadership.

• Develop security awareness initiatives and provide guidance to employees and cross-functional teams.

• Maintain a strategic plan for enhancing ClassLink’s internal security landscape.

⛳️ Requirements

• Demonstrated experience in managing security controls during a SOC 2 Type II audit or equivalent experience with FedRAMP, GovRAMP, or ISO 27001, particularly in relation to IT-team controls and direct collaboration with auditors.

• Proven experience in performing vendor and third-party security risk assessments prior to adoption.

• A minimum of 2 years in a dedicated security position.

• Practical experience with SIEM, EDR, security monitoring, incident response, and vulnerability management.

• In-depth understanding of endpoint, network, identity, access, and data security practices.

• Familiarity with firewalls, VPNs, DNS filtering, Zero Trust, MFA, encryption, and DLP technologies.

• Working knowledge of Active Directory, SAML, OpenID Connect, and OAuth protocols.

• Experience in utilizing PowerShell or Python for security automation tasks.

• Knowledge of NIST, CIS Controls, SOC 2, and ISO 27001 guidelines.

• Strong analytical, problem-solving, communication, and collaborative skills across various functions.

• Capability to independently address security challenges.

• Ability to manage competing priorities involving audits, incidents, and projects with minimal daily oversight.

• Aptitude for balancing daily security tasks with long-term strategic initiatives.

• A bachelor's degree in information security, cybersecurity, or a related area is preferred; equivalent education and relevant experience will be considered.

• Preferred certifications include ISO 27001 Lead Implementer or Lead Auditor, CISSP, CISM, CISA, or CompTIA Security+.

🏝️ Benefits

• More than 4 weeks of vacation.

• Over 13 paid holidays each year.

• 12 weeks of fully paid parental leave for all parents.

• 401(k) plan with a 0.5:1 company match.

• Comprehensive medical, dental, and vision insurance options.

• Company-sponsored life, short-term disability, and long-term disability insurance.

• Optional supplemental life, accident, and pet insurance policies.

• Paid volunteer days through ClassLink Cares initiative.

• Tuition reimbursement for ongoing education.

• Coaching and internal programs designed to support career and personal development.

• Annual company retreats and team-building events.