IT Security Engineer

Description

At ClassLink , we believe learning should be accessible, engaging, and empowering for every student, every educator, everywhere. That’s why we build secure, intuitive tools that empower more than 26 million students and educators worldwide. From simplifying access with single sign-on, to advancing equity with usage analytics, to automating secure rostering, our platform helps schools focus on what matters most: teaching and learning.

We’re not just building tools, we’re building what’s next in education. By removing barriers and enabling data-driven decisions, our solutions help educators lead with confidence and students thrive in and out of the classroom every day.

Our team is driven by purpose and grounded in three core values:

• •Strive to Grow - always learning, improving, and innovating.
• •Deliver Worthwhile Experiences - for our users, our partners, and each other.
• •Contribute with Heart - putting people first in everything we do.

These values shape how we work, innovate, and support the communities we serve. If you’re ready to do work that makes a real difference, and grow alongside a team that values collaboration, support, and continuous improvement. ClassLink is the place for you.

ClassLink is seeking an IT Security Engineer. This is a dedicated security position, not a systems administration role. The IT Security Engineer secures ClassLink’s employee-facing software as a service apps, identity platforms (Microsoft Entra ID and Google Workspace), integrations, and AI services, safeguarding employees and company data, and keeps ClassLink’s internal security controls in line with the standards required for FedRAMP, ISO 27001, SOC 2 Type II, and GovRAMP (formerly StateRAMP).

This role owns day-to-day security operations, including monitoring, threat detection, incident response, vulnerability management, audit readiness and compliance ownership, vendor risk, and security awareness. The IT Security Engineer also establishes policies, controls, and tools that help ClassLink’s internal security program scale with the organization.

Working within the Operations team, this position partners closely with the Systems Engineer and other stakeholders to ensure ClassLink’s corporate technology environment is secure and reliable. This role focuses on internal systems and does not own product security, application security for ClassLink’s own software, or customer-facing infrastructure.

Responsibilities

• •Own ClassLink’s internal security controls against FedRAMP, ISO 27001, SOC 2 Type II, and GovRAMP (formerly StateRAMP) requirements. Map each control to our systems and keep one control inventory that covers every framework.
• •Run gap assessments against each framework, track remediation to closure, and keep our security posture audit ready all year, not only during audit season.
• •Evaluate the security of vendors, SaaS platforms, AI services, browser extensions, integrations, and other technologies before adoption against our control requirements, and maintain our vendor risk records.
• •Conduct access reviews, privileged-account reviews, device compliance audits, and SaaS application permission reviews.
• •Design, implement, and document the technical controls (identity, access, logging, vulnerability management, encryption, and configuration) needed to satisfy those frameworks.
• •Own the configuration and monitoring of EDR, SIEM, identity, access management, MFA, DLP, encryption, and related security tools.
• •Own every audit control, evidence request, and remediation item assigned to the IT Operations team, and serve as the main technical contact for auditors and assessors during readiness reviews and audits.
• •Monitor systems and network activity, investigate alerts, conduct threat hunting, and coordinate incident response and post-incident reviews.
• •Identify and prioritize vulnerabilities, and track remediation to closure with the Systems Engineer and the teams that own each system.
• •Partner with the Systems Engineer to set and verify security requirements for corporate endpoints, networks, firewalls, VPN, DNS filtering, and Zero Trust access.
• •Establish and maintain security standards, hardening guidelines, policies, baseline configurations, and technical documentation.
• •Participate in change control and review the security impact of changes to systems and applications, keeping records for audits.
• •Automate recurring security checks and evidence collection with scripting (PowerShell or Python).
• •Develop security metrics and report on risks, trends, remediation progress, and the organization’s overall security posture.
• •Report control status, open findings, and audit readiness to leadership on a regular schedule.
• •Create security awareness programs and serve as a trusted resource for employees and cross-functional teams.
• •Develop and maintain a roadmap for strengthening ClassLink’s internal security environment.

This position is primarily remote, with up to 10% travel for company meetings, events, or other business needs.

NOTE : This job description is not intended to be all-inclusive. Employees may be asked to perform other related duties as assigned to meet the ongoing needs of the organization.

Requirements

Required Qualifications

• •Hands-on experience owning security controls through a SOC 2 Type II audit, or an equivalent such as FedRAMP, GovRAMP (formerly StateRAMP), or ISO 27001, including owning the controls and evidence typically assigned to the IT team and working directly with auditors.
• •Experience conducting vendor and third party security risk assessments before adoption.
• •2+ years of experience in a dedicated security role, with security as the primary job function.
• •Hands-on experience with SIEM, EDR, security monitoring, incident response, and vulnerability management.
• •Strong knowledge of endpoint, network, identity, access, and data security practices.
• •Experience with firewalls, VPN, DNS filtering, Zero Trust, MFA, encryption, and DLP.
• •Working knowledge of Active Directory, Security Assertion Markup Language (SAML), OpenID Connect, and OAuth.
• •Experience with scripting (PowerShell or Python) to automate security checks and evidence collection.
• •Familiarity with security and compliance frameworks such as NIST, CIS Controls, SOC 2, and ISO 27001.
• •Strong analytical, problem-solving, communication, and cross-functional collaboration skills, with the ability to independently resolve security issues.
• •Ability to prioritize competing audit, incident, and project work with little day-to-day direction.
• •Ability to balance daily security responsibilities with longer-term security initiatives.

Preferred Qualifications

• •Working knowledge of National Institute of Standards and Technology 800-53 controls and how they map across these frameworks.
• •Bachelor’s degree in information security, cybersecurity, or a related field; equivalent education and relevant experience will also be considered.
• •Experience securing Microsoft 365, Microsoft Entra ID, Google Workspace, and enterprise SaaS applications as well as employee endpoints.
• •ISO 27001 Lead Implementer or Lead Auditor, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), or CompTIA Security+.

Benefits:

• •Generous Paid Time Off : 4+ weeks of vacation and 13+ paid holidays
• •Parental Leave : 12 weeks fully paid for all parents
• •Retirement : 401(k) with 0.5:1 company match
• •Comprehensive Health Coverage : Medical, dental, and vision plans
• •Insurance : Company-paid life, short-term disability, and long-term disability, plus voluntary options including supplemental life, accident, and pet insurance

Perks:

• •Volunteer Time Off: Give back through ClassLink Cares paid volunteer days
• •Lifelong Learning: Tuition reimbursement for continued education
• •Growth & Development: Coaching and internal programs to support career and personal growth