> Markdown version of [/jobs/ext/3893674-it-security-engineer](https://www.wearedevelopers.com/jobs/ext/3893674-it-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Security Engineer - **Company:** Classlink Inc. - **Location:** United States (Remote available) - **Experience:** Experienced - **Salary:** $115,000.0 - $125,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Access, Microsoft Windows, Active Directory, Systems Engineering, Software as a Service, Cyber Security, Information Systems, Data Security, Domain Name System (DNS), Multi-Factor Authentication, Identity and Access Management, Information Technology Operations, Intrusion Detection and Prevention, Virtual Private Networks (VPN), Information Systems Security Architecture Professional, Python (Programming Language), OAuth, Windows PowerShell, Openid Connect, Azure Active Directory, Zero Trust Network Access, Security Assertion Markup Language (SAML), Security Information and Event Management, Systems Integration, Software Vulnerability Management, Data Logging, Scripting, Software Security, Firewalls (Computer Science), AI Platforms, Gsuite, CIS Benchmarks - **Published:** October 23, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=074dc04a5facc17a ## About the Role * Hands-on experience owning security controls through a SOC 2 Type II audit, or an equivalent such as FedRAMP, GovRAMP (formerly StateRAMP), or ISO 27001, including owning the controls and evidence typically assigned to the IT team and working directly with auditors. * Experience conducting vendor and third party security risk assessments before adoption. * 2+ years of experience in a dedicated security role, with security as the primary job function. * Hands-on experience with SIEM, EDR, security monitoring, incident response, and vulnerability management. * Strong knowledge of endpoint, network, identity, access, and data security practices. * Experience with firewalls, VPN, DNS filtering, Zero Trust, MFA, encryption, and DLP. * Working knowledge of Active Directory, Security Assertion Markup Language (SAML), OpenID Connect, and OAuth. * Experience with scripting (PowerShell or Python) to automate security checks and evidence collection. * Familiarity with security and compliance frameworks such as NIST, CIS Controls, SOC 2, and ISO 27001. * Strong analytical, problem-solving, communication, and cross-functional collaboration skills, with the ability to independently resolve security issues. * Ability to prioritize competing audit, incident, and project work with little day-to-day direction. * Ability to balance daily security responsibilities with longer-term security initiatives., * Working knowledge of National Institute of Standards and Technology 800-53 controls and how they map across these frameworks. * Bachelor's degree in information security, cybersecurity, or a related field; equivalent education and relevant experience will also be considered. * Experience securing Microsoft 365, Microsoft Entra ID, Google Workspace, and enterprise SaaS applications as well as employee endpoints. * ISO 27001 Lead Implementer or Lead Auditor, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), or CompTIA Security+. ## Description ClassLink is seeking an IT Security Engineer. This is a dedicated security position, not a systems administration role. The IT Security Engineer secures ClassLink's employee-facing software as a service apps, identity platforms (Microsoft Entra ID and Google Workspace), integrations, and AI services, safeguarding employees and company data, and keeps ClassLink's internal security controls in line with the standards required for FedRAMP, ISO 27001, SOC 2 Type II, and GovRAMP (formerly StateRAMP). This role owns day-to-day security operations, including monitoring, threat detection, incident response, vulnerability management, audit readiness and compliance ownership, vendor risk, and security awareness. The IT Security Engineer also establishes policies, controls, and tools that help ClassLink's internal security program scale with the organization. Working within the Operations team, this position partners closely with the Systems Engineer and other stakeholders to ensure ClassLink's corporate technology environment is secure and reliable. This role focuses on internal systems and does not own product security, application security for ClassLink's own software, or customer-facing infrastructure., * Own ClassLink's internal security controls against FedRAMP, ISO 27001, SOC 2 Type II, and GovRAMP (formerly StateRAMP) requirements. Map each control to our systems and keep one control inventory that covers every framework. * Run gap assessments against each framework, track remediation to closure, and keep our security posture audit ready all year, not only during audit season. * Evaluate the security of vendors, SaaS platforms, AI services, browser extensions, integrations, and other technologies before adoption against our control requirements, and maintain our vendor risk records. * Conduct access reviews, privileged-account reviews, device compliance audits, and SaaS application permission reviews. * Design, implement, and document the technical controls (identity, access, logging, vulnerability management, encryption, and configuration) needed to satisfy those frameworks. * Own the configuration and monitoring of EDR, SIEM, identity, access management, MFA, DLP, encryption, and related security tools. * Own every audit control, evidence request, and remediation item assigned to the IT Operations team, and serve as the main technical contact for auditors and assessors during readiness reviews and audits. * Monitor systems and network activity, investigate alerts, conduct threat hunting, and coordinate incident response and post-incident reviews. * Identify and prioritize vulnerabilities, and track remediation to closure with the Systems Engineer and the teams that own each system. * Partner with the Systems Engineer to set and verify security requirements for corporate endpoints, networks, firewalls, VPN, DNS filtering, and Zero Trust access. * Establish and maintain security standards, hardening guidelines, policies, baseline configurations, and technical documentation. * Participate in change control and review the security impact of changes to systems and applications, keeping records for audits. * Automate recurring security checks and evidence collection with scripting (PowerShell or Python). * Develop security metrics and report on risks, trends, remediation progress, and the organization's overall security posture. * Report control status, open findings, and audit readiness to leadership on a regular schedule. * Create security awareness programs and serve as a trusted resource for employees and cross-functional teams. * Develop and maintain a roadmap for strengthening ClassLink's internal security environment. This position is primarily remote, with up to 10% travel for company meetings, events, or other business needs. NOTE: This job description is not intended to be all-inclusive. Employees may be asked to perform other related duties as assigned to meet the ongoing needs of the organization.