IT Security Engineer

Fully Remote
• United States
• Operations

Full-time

At Class Link, we believe learning should be accessible, engaging, and empowering for every student, every educator, everywhere. That’s why we build secure, intuitive tools that empower more than 26 million students and educators worldwide. From simplifying access with single sign-on, to advancing equity with usage analytics, to automating secure rostering, our platform helps schools focus on what matters most: teaching and learning.

We’re not just building tools, we’re building what’s next in education. By removing barriers and enabling data-driven decisions, our solutions help educators lead with confidence and students thrive in and out of the classroom every day.

Our team is driven by purpose and grounded in three core values:

• Strive to Grow - always learning, improving, and innovating.
• Deliver Worthwhile Experiences - for our users, our partners, and each other.
• Contribute with Heart - putting people first in everything we do.

These values shape how we work, innovate, and support the communities we serve. If you’re ready to do work that makes a real difference, and grow alongside a team that values collaboration, support, and continuous improvement. Class Link is the place for you.

Class Link is seeking an IT Security Engineer. The IT Security Engineer protects and strengthens Class Link’s internal corporate technology environment, safeguarding employees, company data, and employee-facing systems across endpoint, identity, network, and data security.

This role owns day-to-day security operations, including monitoring, threat detection, incident response, vulnerability management, compliance support, vendor risk, and security awareness. The IT Security Engineer also establishes policies, controls, and tools that help Class Link’s internal security program scale with the organization.

Working within the Operations team, this position partners closely with the Systems Engineer and other stakeholders to ensure Class Link’s corporate technology environment is secure and reliable. This role focuses on internal systems and does not own product security, application security, or customer-facing infrastructure.

• Manage security controls across corporate endpoints, networks, firewalls, VPN, DNS filtering, and Zero Trust access.
• Administer and monitor EDR, SIEM, identity, access management, MFA, DLP, encryption, and related security tools.
• Monitor systems and network activity, investigate alerts, conduct threat hunting, and coordinate incident response and post-incident reviews.
• Identify and prioritize vulnerabilities, oversee remediation and patching efforts, and monitor for configuration drift.
• Establish and maintain security standards, hardening guidelines, policies, baseline configurations, and technical documentation.
• Conduct access reviews, privileged-account reviews, device compliance audits, and SaaS application permission reviews.
• Support compliance audits and certifications by gathering evidence, documenting controls, and tracking remediation activities.
• Evaluate the security of vendors, SaaS platforms, AI services, browser extensions, integrations, and other technologies before adoption.
• Develop security metrics and report on risks, trends, remediation progress, and the organization’s overall security posture.
• Create security awareness programs and serve as a trusted resource for employees and cross-functional teams.
• Develop and maintain a roadmap for strengthening Class Link’s internal security environment.

This position is primarily remote, with up to 10% travel for company meetings, events, or other business needs.

NOTE:

This job description is not intended to be all-inclusive. Employees may be asked to perform…