IT Security Engineer

At ClassLink, we believe learning should be accessible, engaging, and empowering for every student, every educator, everywhere. That’s why we build secure, intuitive tools that empower more than 26 million students and educators worldwide. From simplifying access with single sign-on, to advancing equity with usage analytics, to automating secure rostering, our platform helps schools focus on what matters most: teaching and learning.

We’re not just building tools, we’re building what’s next in education. By removing barriers and enabling data-driven decisions, our solutions help educators lead with confidence and students thrive in and out of the classroom every day.

Our team is driven by purpose and grounded in three core values:

• Strive to Grow - always learning, improving, and innovating.
• Deliver Worthwhile Experiences - for our users, our partners, and each other.
• Contribute with Heart - putting people first in everything we do.

These values shape how we work, innovate, and support the communities we serve. If you’re ready to do work that makes a real difference, and grow alongside a team that values collaboration, support, and continuous improvement. ClassLink is the place for you.

ClassLink is seeking an IT Security Engineer. This is a dedicated security position, not a systems administration role. The IT Security Engineer secures ClassLink’s employee-facing software as a service apps, identity platforms (Microsoft Entra ID and Google Workspace), integrations, and AI services, safeguarding employees and company data, and keeps ClassLink’s internal security controls in line with the standards required for FedRAMP, ISO 27001, SOC 2 Type II, and GovRAMP (formerly StateRAMP).

This role owns day-to-day security operations, including monitoring, threat detection, incident response, vulnerability management, audit readiness and compliance ownership, vendor risk, and security awareness. The IT Security Engineer also establishes policies, controls, and tools that help ClassLink’s internal security program scale with the organization.

Working within the Operations team, this position partners closely with the Systems Engineer and other stakeholders to ensure ClassLink’s corporate technology environment is secure and reliable. This role focuses on internal systems and does not own product security, application security for ClassLink’s own software, or customer-facing infrastructure.

Responsibilities

• Own ClassLink’s internal security controls against FedRAMP, ISO 27001, SOC 2 Type II, and GovRAMP (formerly StateRAMP) requirements. Map each control to our systems and keep one control inventory that covers every framework.
• Run gap assessments against each framework, track remediation to closure, and keep our security posture audit ready all year, not only during audit season.
• Evaluate the security of vendors, SaaS platforms, AI services, browser extensions, integrations, and other technologies before adoption against our control requirements, and maintain our vendor risk records.
• Conduct access reviews, privileged-account reviews, device compliance audits, and SaaS application permission reviews.
• Design, implement, and document the technical controls (identity, access, logging, vulnerability management, encryption, and configuration) needed to satisfy those frameworks.
• Own the configuration and monitoring of EDR, SIEM, identity, access management, MFA, DLP, encryption, and related security tools.
• Own every audit control, evidence request, and remediation item assigned to the IT Operations team, and serve as the main technical contact for auditors and assessors during readiness reviews and audits.
• Monitor systems and network activity, investigate alerts, conduct threat hunting, and coordinate incident response and post-incident reviews.
• Identify and prioritize vulnerabilities, and track remediation to closure with the Systems Engineer and the teams that own each system.
• Partner with the Systems Engineer to set and verify security requirements for corporate endpoints, networks, firewalls, VPN, DNS filtering, and Zero Trust access.
• Establish and maintain security standards, hardening guidelines, policies, baseline configurations, and technical documentation.
• Participate in change control and review the security impact of changes to systems and applications, keeping records for audits.
• Automate recurring security checks and evidence collection with scripting (PowerShell or Python).
• Develop security metrics and report on risks, trends, remediation progress, and the organization’s overall security posture.
• Report control status, open findings, and audit readiness to leadership on a regular schedule.
• Create security awareness programs and serve as a trusted resource for employees and cross-functional teams.
• Develop and maintain a roadmap for strengthening ClassLink’s internal security environment.

This position is primarily remote, with up to 10% travel for company meetings, events, or other business needs.

NOTE: This job description is not intended to be all-inclusive. Employees may be asked to perform other related duties as assigned to meet the ongoing needs of the organization.