Edmentum Information Security Engineer at Edmentum responsible for monitoring security events, incident response, vulnerability assessments, and compliance. Collaborate with teams to build security into operations and explore AI tools for defense.
Responsibilities
At Edmentum, security is the foundation that keeps student data, educator tools, and the platforms behind learning for millions of students safe. As an Information Security Engineer, you'll get hands-on with the systems and practices that protect them. You'll work alongside talented Technology teams to strengthen our security posture, sharpen your skills across security operations and compliance, and help bring new tools, including AI, into how we defend Edmentum.
Monitor production systems for security events, take part in incident response, and help keep Edmentum's data and infrastructure secure and available.
Run vulnerability assessments, drive remediation, and apply proven risk frameworks to close security gaps.
Support compliance with FERPA, COPPA, GDPR, NIST, and SOC 2, helping keep Edmentum audit-ready.
Evaluate and administer security tools, and explore emerging technologies, including AI, to strengthen our defenses.
Partner with development, systems, and network teams to build security into how we build and operate.
Improve change management, configuration management, and security metrics, and help find root causes after incidents.
Qualification
You understand SDLC methodologiesYou haveYou have exposure to offensive security
Required
You have 3 to 5 years of experience supporting and securing enterprise IT infrastructure, ideally in a SaaS environment.
You have a bachelor's degree in a technology-related field or equivalent hands-on experience.
You have a solid grasp of core security principles and experience securing enterprise infrastructure, operating systems, and platforms.
You have hands-on experience with vulnerability scanning, assessment, and remediation.
You are familiar with frameworks and regulations such as NIST CSF, NIST 800, ISO 27001, SOC 2, FERPA, COPPA, and GDPR, and can apply them to real-world work.
You understand SDLC methodologies, including Waterfall and Agile, and how to build security into them.
You are a clear communicator and strong collaborator who works well independently and with teams at every level.
You have, or are working toward, certifications such as CISA, CISSP, or PMP.
You have a passion for learning and stay current on evolving security threats, tools, and best practices.
You have exposure to offensive security, such as penetration testing, red teaming, or application security (a plus).
You have experience with AI systems and AI-specific risks such as prompt injection and insecure agent behavior (a plus).
You are willing to take on evolving responsibilities based on business needs.
Preferred
Exposure to offensive security such as penetration testing, red teaming, or application security
Experience with AI systems and AI-specific risks such as prompt injection and insecure agent behavior
