IT Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Safeguard and enhance ClassLink’s internal corporate technology landscape by focusing on endpoint, identity, network, and data security.

• Oversee security measures across corporate endpoints, networks, firewalls, VPNs, DNS filtering, and implement Zero Trust access.

• Manage and supervise EDR, SIEM, identity and access management, MFA, DLP, encryption, and other related security tools.

• Track systems and network activities, investigate alerts, engage in threat hunting, and coordinate incident response along with post-incident evaluations.

• Recognize and prioritize vulnerabilities, direct remediation and patching efforts, and monitor configuration drift.

• Establish and uphold security standards, hardening guidelines, policies, baseline configurations, and maintain technical documentation.

• Execute access reviews, privileged account assessments, device compliance audits, and review permissions for SaaS applications.

• Assist with compliance audits and certifications by collecting evidence, documenting controls, and managing remediation activities.

• Assess vendors, SaaS platforms, AI services, browser extensions, integrations, and other technologies prior to adoption.

• Create security metrics and report on risks, trends, remediation progress, and the overall security posture.

• Develop security awareness programs and act as a reliable resource for employees and cross-functional teams.

• Formulate and maintain a roadmap for enhancing ClassLink’s internal security framework.

• Collaborate with the Systems Engineer and other stakeholders within the Operations team.

• Be prepared to travel up to 10% for company meetings, events, or other business-related needs.

⛳️ Requirements

• A minimum of five years of experience in information security, cybersecurity, or a related discipline.

• Practical experience with SIEM, EDR, security monitoring, incident response, and vulnerability management.

• Comprehensive understanding of endpoint, network, identity, access, and data security practices.

• Experience with firewalls, VPNs, DNS filtering, Zero Trust, MFA, patch management, encryption, and DLP.

• Familiarity with NIST, CIS Controls, SOC 2, and ISO 27001 standards.

• Experience in conducting vendor risk assessments and supporting internal or external audits.

• Strong analytical, problem-solving, communication, and cross-functional collaboration capabilities.

• Ability to balance daily operational duties with longer-term security projects.

• Bachelor’s degree in information security, cybersecurity, or a related field is preferred; equivalent education and relevant experience will also be considered.

• Experience in securing Microsoft 365, Microsoft Entra ID, Microsoft Intune, Windows, macOS, Google Workspace, and enterprise SaaS applications is preferred.

• Security certifications such as CompTIA Security+, CISSP, CISM, CEH, or equivalent credentials are preferred.

🏝️ Benefits

• 4+ weeks of vacation.

• 13+ paid holidays.

• 12 weeks of fully paid parental leave for all parents.

• 401(k) with a 0.5:1 company match.

• Medical, dental, and vision plans.

• Company-paid life insurance.

• Company-paid short-term disability insurance.

• Company-paid long-term disability insurance.

• Voluntary supplemental life, accident, and pet insurance.

• ClassLink Cares paid volunteer days.

• Tuition reimbursement for ongoing education.

• Coaching and internal programs to support career and personal development.

• Annual company retreats and team events.