Edtech.com's Summary

Frontline Education is hiring a Senior Information Security Engineer 2 to evaluate, design, and operate the network, endpoint, and cloud security solutions that protect the company’s systems and its customers’ data. The engineer reports to the CISO (chief information security officer) on a small, agile security team, leading incident response, assessing applications, and building security into the software development lifecycle. The role also supports compliance work and responds to customer and vendor security reviews.

Highlights

Design, build, and deploy cloud security controls and technologies to protect Frontline’s public and private cloud infrastructure.
Lead the Security Incident Response Team in investigating attacks, unauthorized access, and policy breaches, while maintaining incident response runbooks and running tabletop exercises and post-incident reviews.
Integrate SAST, DAST, and software composition analysis tooling into CI/CD pipelines and join threat modeling and architecture reviews to guide secure application design.
Perform vulnerability assessments and penetration tests, prioritize remediation, and deploy and manage firewalls, web application firewalls, proxy systems, and threat detection tools.
Help assess and enforce compliance with standards such as ISO 27001, PCI, and SOC, and support third-party vendor assessments and customer security questionnaires.
Assist the CISO in shaping security engineering roadmaps and mentor engineering teams on security best practices.
Eight or more years of experience in IT, security engineering, application security, or enterprise SaaS infrastructure, including 3+ years in software or application security.
Bachelor’s degree or equivalent work experience in information technology, cybersecurity, or computer science, plus a security certification such as CEH, CISSP, CISA, CISM, or CRISC.
Strong knowledge of TCP/IP networking, cryptography, centralized log management, and frameworks and regulations including NIST, ISO 2700x, FERPA, HIPAA, and SOX.
Remote position open to candidates in the United States only.

Senior Information Security Engineer 2 Full Description

Senior Information Security Engineer 2

We are seeking a Senior Information Security Engineer 2 for an exciting opportunity to be part of a small security team and growing company, in an evolving industry. The Senior Security Engineer will report to the CISO and engage other stakeholders across the organization to drive change and promote security. This position is USA only, remote.

Our mission is very broad, and our team is small and agile. We will look toward your unique skills to approach and solve problems in your own way. Whether engineering a system to address a technical security hurdle, protecting our customers’ data, or consulting on a wide range of security topics, you are empowered to engage and lead cross-functionally. In the role of Senior Information Security Engineer, you will focus on the evaluation, architecture, development, deployment, and operation of network, endpoint, and cloud security solutions.

Responsibilities:

Engineer, implement and monitor security measures for the protection of computer systems, networks and information
Design, build and deploy next-generation cloud security practices, controls, and technologies to protect Frontline’s public and private cloud infrastructure
Work across product, infrastructure and business systems teams to enhance and evangelize security in cloud infrastructure
Research emerging technologies and maintain awareness of current security risks in support of security enhancement and development efforts
Assist with driving changes needed to respond to emerging threats and implement countermeasures
Lead initiatives to develop and build security utilities and tools that will enable others to operate more efficiently and securely in cloud environments
Develop and maintain automation scripts or internal tools to improve the efficiency and consistency of security operations
Lead the Security Incident Response Team (SIRT) efforts to respond to information system security incidents, including investigation of, countermeasures to, and recovery from computer-based attacks, unauthorized access, and policy breaches
Create and maintain incident response runbooks, conduct tabletop exercises, and perform post-incident reviews to improve readiness
Support the CISO in strengthening incident readiness posture and response maturity across the organization
Conduct regular security assessments of a suite of applications (internally developed and acquired through M&A)
Integrate security controls into CI/CD pipelines by enabling SAST, DAST, and software composition analysis (SCA) tooling
Collaborate with development teams to embed security throughout the software development lifecycle (SSDLC)
Participate in threat modeling and security architecture reviews to guide secure design of applications and infrastructure
Create automated tests to encourage and enforce security standards
Play a key role in the cross-functional effort to define secure configuration standards for key technology platforms
Analyze information systems utilizing various cybersecurity techniques including packet analysis tools, forensics tools, intrusion prevention systems, firewalls, SIEM solutions, and vulnerability assessment software to aid in the detection and prevention of cyberattacks
Perform vulnerability assessments and penetration tests of systems and networks and prioritize remediation efforts
Deploy and manage security technologies such as firewalls, web application firewalls, proxy systems, logging, and other security devices, threat detection tools
Conduct and monitor Independent Validation and Verification (IV&V) testing for software applications and systems
Help design and implement processes and technology solutions to assess, monitor, audit, and enforce compliance with internal and regulatory requirements, such as ISO27001, PCI, SOC, and others
Create detailed business, technology, operational, and security requirements
Understand, develop, implement, and monitor technical and non-technical policies, procedures, processes, and workflows
Assist the CISO in shaping and operationalizing security engineering initiatives and strategic roadmaps
Solution delivery / implementation (directly or through partnerships)
Support third-party vendor assessments and monitor external partners for ongoing security risks
Respond to customer and stakeholder security inquiries, including security questionnaires and due diligence requests
Lead technical mentorship and knowledge-sharing initiatives across engineering teams to champion security best practices

Qualifications:

Bachelor’s degree or equivalent work experience in Information Technology, Cyber Security, Management of Information Systems, Computer Science, Informatics, Information Science or similar discipline
8+ years’ experience working in IT, security engineering, application security, enterprise SaaS infrastructure environment, or similar role(s)
3+ years of experience in software/application security required
Security certification such as CEH, CISSP, CISA, CISM, CRISC or equivalent required
Strong working knowledge of TCP/IP networking and common protocols
Experience with and understanding of cryptography
Knowledge of a broad range of security controls and risk management frameworks NIST, ISO 2700x, PCI-DSS, SOC, and other similar standards
Knowledge of regulatory compliance issues such as FERPA, HIPAA, SOX, GLBA, and PCI
Experience with centralized log management tools

Compensation & Benefits

Frontline Education offers competitive compensation aligned to experience, skills, and internal equity.

Eligible employees may also have access to: bonus opportunities; 401(k) with company match; Employee Stock Purchase Plan (ESPP); comprehensive health and wellness benefits; personalized PTO; tuition reimbursement and professional development support.

Let me find your next job.

Thanks - you're signed up.

Senior Information Security Engineer 2

Edtech.com's Summary

Senior Information Security Engineer 2 Full Description

Senior Cyber Security Engineer (Hybrid)

Linux Security Engineering Scientist Associate

Risk Operations and Visibility Manager

Cybersecurity Analyst

Cyber Security Governance Program Manager