IT Security Engineer

ClassLink

. Own internal security controls against FedRAMP, ISO 27001, SOC 2 Type II, and GovRAMP requirements .

Posted 10/23/2026full-timeRemote • United StatesJuniorMid-Level💰 $115,000 - $125,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing security controls aligned with FedRAMP, ISO 27001, and SOC 2 Type II standards, while effectively conducting risk assessments and incident response. Proficient in security automation using PowerShell or Python, and skilled in maintaining audit readiness and compliance across various security frameworks.

Highest-signal resume keywords

SOC 2 Type II Audit ExperienceSecurity Risk AssessmentsSIEM and EDR ProficiencyVulnerability ManagementPowerShell or Python Scripting

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Controls ManagementIncident ResponseVulnerability RemediationData Security PracticesAccess ManagementIdentity ManagementEncryptionDLPNetwork SecurityEndpoint Security

Soft Skills

Analytical SkillsProblem-SolvingCommunicationCross-Functional CollaborationIndependent Issue Resolution

Tools & Technologies

SIEMEDRMFAVPNFirewallsDNS FilteringZero TrustActive DirectorySAMLOpenID Connect

Certifications & Qualifications

ISO 27001 Lead ImplementerISO 27001 Lead AuditorCISSPCISMCISACompTIA Security+

Industry Keywords

FedRAMPGovRAMPISO 27001NISTCIS ControlsAudit ReadinessSecurity StandardsTechnical DocumentationSecurity Awareness ProgramsChange Control

Tech Stack

Tools & technologies

Cyber SecurityDNSFirewallsPython

About the role

Key responsibilities & impact

Own internal security controls against FedRAMP, ISO 27001, SOC 2 Type II, and GovRAMP requirements
Map controls to systems and maintain a unified control inventory
Run gap assessments, track remediation, and maintain year-round audit readiness
Evaluate vendors, SaaS platforms, AI services, browser extensions, integrations, and other technologies
Maintain vendor risk records
Conduct access, privileged-account, device compliance, and SaaS permission reviews
Design, implement, and document identity, access, logging, vulnerability management, encryption, and configuration controls
Configure and monitor EDR, SIEM, identity, access management, MFA, DLP, encryption, and related security tools
Own audit controls, evidence requests, and remediation items assigned to IT Operations
Serve as the technical contact for auditors and assessors
Monitor systems and network activity, investigate alerts, conduct threat hunting, and coordinate incident response and post-incident reviews
Identify, prioritize, and track vulnerability remediation
Partner with the Systems Engineer on endpoint, network, firewall, VPN, DNS filtering, and Zero Trust security requirements
Establish security standards, hardening guidelines, policies, baseline configurations, and technical documentation
Participate in change control and review security impacts of system and application changes
Automate recurring security checks and evidence collection with PowerShell or Python
Develop security metrics and report risks, trends, remediation progress, and security posture
Report control status, findings, and audit readiness to leadership
Create security awareness programs and advise employees and cross-functional teams
Maintain a roadmap for strengthening ClassLink’s internal security environment

Requirements

What you’ll need

Hands-on experience owning security controls through a SOC 2 Type II audit, or equivalent FedRAMP, GovRAMP, or ISO 27001 experience, including owning IT-team controls and working directly with auditors
Experience conducting vendor and third-party security risk assessments before adoption
2+ years of experience in a dedicated security role
Hands-on experience with SIEM, EDR, security monitoring, incident response, and vulnerability management
Strong knowledge of endpoint, network, identity, access, and data security practices
Experience with firewalls, VPN, DNS filtering, Zero Trust, MFA, encryption, and DLP
Working knowledge of Active Directory, SAML, OpenID Connect, and OAuth
Experience with PowerShell or Python scripting for security automation
Familiarity with NIST, CIS Controls, SOC 2, and ISO 27001
Strong analytical, problem-solving, communication, and cross-functional collaboration skills
Ability to independently resolve security issues
Ability to prioritize competing audit, incident, and project work with little day-to-day direction
Ability to balance daily security responsibilities with longer-term initiatives
Bachelor’s degree in information security, cybersecurity, or a related field is preferred; equivalent education and relevant experience considered
Preferred certifications include ISO 27001 Lead Implementer or Lead Auditor, CISSP, CISM, CISA, or CompTIA Security+

Benefits

Comp & perks

4+ weeks of vacation
13+ paid holidays
12 weeks fully paid parental leave for all parents
401(k) with 0.5:1 company match
Medical, dental, and vision plans
Company-paid life, short-term disability, and long-term disability insurance
Voluntary supplemental life, accident, and pet insurance
Paid volunteer days through ClassLink Cares
Tuition reimbursement for continued education
Coaching and internal programs supporting career and personal growth
Annual company retreats and team events