Information Security Engineer

Edmentum is a technology-enabled learning company focused on providing flexible learning environments and tools for educators and students. The Information Security Engineer will monitor security events, respond to incidents, assess and remediate vulnerabilities, support regulatory compliance, administer security tools, and partner with technology teams to strengthen enterprise security.

Responsibilities:

• Monitor production systems for security events, take part in incident response, and help keep Edmentum's data and infrastructure secure and available
• Run vulnerability assessments, drive remediation, and apply proven risk frameworks to close security gaps
• Support compliance with FERPA, COPPA, GDPR, NIST, and SOC 2, helping keep Edmentum audit-ready
• Evaluate and administer security tools, and explore emerging technologies, including AI, to strengthen our defenses
• Partner with development, systems, and network teams to build security into how we build and operate
• Improve change management, configuration management, and security metrics, and help find root causes after incidents

Requirements:

• You have 3 to 5 years of experience supporting and securing enterprise IT infrastructure, ideally in a SaaS environment
• You have a bachelor's degree in a technology-related field or equivalent hands-on experience
• You have a solid grasp of core security principles and experience securing enterprise infrastructure, operating systems, and platforms
• You have hands-on experience with vulnerability scanning, assessment, and remediation
• You are familiar with frameworks and regulations such as NIST CSF, NIST 800, ISO 27001, SOC 2, FERPA, COPPA, and GDPR, and can apply them to real-world work
• You understand SDLC methodologies, including Waterfall and Agile, and how to build security into them
• You are a clear communicator and strong collaborator who works well independently and with teams at every level
• You have a passion for learning and stay current on evolving security threats, tools, and best practices
• You have, or are working toward, certifications such as CISA, CISSP, or PMP
• You have exposure to offensive security, such as penetration testing, red teaming, or application security (a plus)
• You have experience with AI systems and AI-specific risks such as prompt injection and insecure agent behavior (a plus)