Information Security Engineer
Core
Monitor production systems, run vulnerability assessments, drive remediation, and support compliance with frameworks like NIST, SOC 2, FERPA, and GDPR to secure student data and infrastructure.
Role type
mid-level Information Security Engineer (SaaS)
Builds
secure enterprise IT infrastructure and security operations for a tech-enabled learning platform
Domain
Education technology / Cybersecurity
Required skills
vulnerability scanning, risk assessment, incident response, compliance frameworks (NIST, SOC 2, FERPA, COPPA, GDPR), SDLC security integration, change management, root cause analysis
Preferred skills
offensive security (penetration testing, red teaming), AI system security (prompt injection, agent behavior), CISA/CISSP/PMP certifications
Technologies
NIST CSF, NIST 800, ISO 27001, SOC 2, FERPA, COPPA, GDPR, AI systems
Responsibilities
Monitor production systems for security events and lead incident response; Execute vulnerability assessments and drive remediation efforts; Ensure compliance with regulatory frameworks and audit readiness; Evaluate and administer security tools including emerging AI technologies; Partner with development and network teams to embed security in SDLC; Improve change and configuration management processes
Seniority
Mid-level, hands-on IC
