Security Engineer Ii

Position: SECURITY ENGINEER II (318A10526)
TARGET SALARY:  DOQWho we are Infinite Campus is an educational software company that helps K12 school districts manage their day-to-day operations. We’ve been around for over 30 plus years and are the most trusted name in student information. Our customers include school districts across the United States and our products support more than ten million students.

What you’ll doThe Sec Ops Engineer II will help protect Infinite Campus systems, products, and services by identifying, evaluating, and mitigating security vulnerabilities and responding to active security incidents. This role will administer, implement, configure, and maintain security tools and platforms; analyze vulnerability scans and penetration-testing findings; monitor emerging industry vulnerabilities; and determine how identified risks may affect the organization. They will perform root-cause analysis of security events, develop and recommend appropriate risk-mitigation actions, and balance security requirements with operational needs.

Working across infrastructure, development, operations, and monitoring teams, the Sec Ops Engineer II will contribute to security projects, improve security controls and processes, support incident response, and help strengthen the overall security posture of Infinite Campus. As a Level II engineer, they will operate with greater independence, resolve moderately complex security issues, and provide technical guidance and support to less-experienced security team members.

Who you areThe ideal candidate will bring a solid foundation in security engineering, including vulnerability identification and remediation, security monitoring and alert analysis, incident response, security forensics, network security, and security platform administration. They should have experience or working knowledge of vulnerability scanning tools, endpoint protection, firewall technologies, patch-management technologies, security frameworks, and Windows, Linux, and Active Directory security and hardening.

They should be able to independently assess security findings, troubleshoot security tools and platforms, perform root-cause analysis, identify weaknesses in existing controls, and translate security risks into practical remediation recommendations. Strong problem-solving, documentation, cross-functional communication, prioritization, and risk-analysis skills are important, as is the ability to manage multiple security priorities with limited supervision. A bachelor's degree in Computer Science or a related field—or equivalent years of experience at an appropriate level of complexity—is expected, along with a current CISSP or similar certification, or the ability to obtain one.

Your skill-setThe right fit will be a self-motivated security professional who has progressed beyond performing primarily routine or closely directed security work and is ready to take greater ownership of security issues and solutions. They will be comfortable investigating incidents, assessing vulnerabilities, making sound risk-based decisions with limited direction, and collaborating with multiple technical teams to resolve problems. This individual should be curious about emerging threats and technologies, able to balance security risk against business and operational requirements, and motivated to improve existing security controls rather than simply maintain them.

They will also be someone colleagues can increasingly rely on as a technical resource—sharing knowledge, providing guidance to less-experienced team members, meeting aggressive timelines, and building productive relationships across the organization while maintaining a strong focus on security, quality, and continuous improvement.

What we offerA highly competitive…