Information Security Engineer

About the role

WHO WE ARE

Edmentum is a dynamic educator and student-focused company dedicated to tech-enabled learning solutions. Our goal is to ensure that all students have access to flexible learning environments and educators have the tools they need to support their students. We are on a mission to create innovative, proven learning technology, partnering with educators to ignite student potential. We are a Remote First organization with a strong commitment to excellence, innovation, and customer satisfaction.

What You'll Do

At Edmentum, security is the foundation that keeps student data, educator tools, and the platforms behind learning for millions of students safe. As an Information Security Engineer, you'll get hands-on with the systems and practices that protect them. You'll work alongside talented Technology teams to strengthen our security posture, sharpen your skills across security operations and compliance, and help bring new tools, including AI, into how we defend Edmentum.

In this role you will:

- Monitor production systems for security events, take part in incident response, and help keep Edmentum's data and infrastructure secure and available.

- Run vulnerability assessments, drive remediation, and apply proven risk frameworks to close security gaps.

- Support compliance with FERPA, COPPA, GDPR, NIST, and SOC 2, helping keep Edmentum audit-ready.

- Evaluate and administer security tools, and explore emerging technologies, including AI, to strengthen our defenses.

- Partner with development, systems, and network teams to build security into how we build and operate.

- Improve change management, configuration management, and security metrics, and help find root causes after incidents.

Who You Are

- You have 3 to 5 years of experience supporting and securing enterprise IT infrastructure, ideally in a SaaS environment.

- You have a bachelor's degree in a technology-related field or equivalent hands-on experience.

- You have a solid grasp of core security principles and experience securing enterprise infrastructure, operating systems, and platforms.

- You have hands-on experience with vulnerability scanning, assessment, and remediation.

- You are familiar with frameworks and regulations such as NIST CSF, NIST 800, ISO 27001, SOC 2, FERPA, COPPA, and GDPR, and can apply them to real-world work.

- You understand SDLC methodologies, including Waterfall and Agile, and how to build security into them.

- You are a clear communicator and strong collaborator who works well independently and with teams at every level.

- You have, or are working toward, certifications such as CISA, CISSP, or PMP.

- You have a passion for learning and stay current on evolving security threats, tools, and best practices.

- You have exposure to offensive security, such as penetration testing, red teaming, or application security (a plus).