Job description

At ClassLink , we believe learning should be accessible, engaging, and empowering for every student, every educator, everywhere. That’s why we build secure, intuitive tools that empower more than 26 million students and educators worldwide. From simplifying access with single sign-on, to advancing equity with usage analytics, to automating secure rostering, our platform helps schools focus on what matters most: teaching and learning. We’re not just building tools, we’re building what’s next in education. By removing barriers and enabling data-driven decisions, our solutions help educators lead with confidence and students thrive in and out of the classroom every day. Our team is driven by purpose and grounded in three core values: • Strive to Grow - always learning, improving, and innovating. • Deliver Worthwhile Experiences - for our users, our partners, and each other. • Contribute with Heart - putting people first in everything we do. These values shape how we work, innovate, and support the communities we serve. If you’re ready to do work that makes a real difference, and grow alongside a team that values collaboration, support, and continuous improvement. ClassLink is the place for you. ClassLink is seeking an IT Security Engineer. The IT Security Engineer protects and strengthens ClassLink’s internal corporate technology environment, safeguarding employees, company data, and employee-facing systems across endpoint, identity, network, and data security. This role owns day-to-day security operations, including monitoring, threat detection, incident response, vulnerability management, compliance support, vendor risk, and security awareness. The IT Security Engineer also establishes policies, controls, and tools that help ClassLink’s internal security program scale with the organization. Working within the Operations team, this position partners closely with the Systems Engineer and other stakeholders to ensure ClassLink’s corporate technology environment is secure and reliable. This role focuses on internal systems and does not own product security, application security, or customer-facing infrastructure. Responsibilities • Manage security controls across corporate endpoints, networks, firewalls, VPN, DNS filtering, and Zero Trust access. • Administer and monitor EDR, SIEM, identity, access management, MFA, DLP, encryption, and related security tools. • Monitor systems and network activity, investigate alerts, conduct threat hunting, and coordinate incident response and post-incident reviews. • Identify and prioritize vulnerabilities, oversee remediation and patching efforts, and monitor for configuration drift. • Establish and maintain security standards, hardening guidelines, policies, baseline configurations, and technical documentation. • Conduct access reviews, privileged-account reviews, device compliance audits, and SaaS application permission reviews. • Support compliance audits and certifications by gathering evidence, documenting controls, and tracking remediation activities. • Evaluate the security of vendors, SaaS platforms, AI services, browser extensions, integrations, and other technologies before adoption. • Develop security metrics and report on risks, trends, remediation progress, and the organization’s overall security posture. • Create security awareness programs and serve as a trusted resource for employees and cross-functional teams. • Develop and maintain a roadmap for strengthening ClassLink’s internal security environment. This position is primarily remote, with up to 10% travel for company meetings, events, or other business needs. NOTE : This job description is not intended to be all-inclusive. Employees may be asked to perform other related duties as assigned to meet the ongoing needs of the organization. Requirements Required Qualifications • Five or more years of experience in information security, cybersecurity, or a related field. • Hands-on experience with SIEM, EDR, security monitoring, incident response, and vulnerability management. • Strong knowledge of endpoint, network, identity, access, and data security practices. • Experience with firewalls, VPN, DNS filtering, Zero Trust, MFA, patch management, encryption, and DLP. • Familiarity with security and compliance frameworks such as NIST, CIS Controls, SOC 2, and ISO 27001. • Experience conducting vendor risk assessments and supporting internal or external audits. • Strong analytical, problem-solving, communication, and cross-functional collaboration skills. • Ability to balance daily operational responsibilities with longer-term security initiatives. Preferred Qualifications • Bachelor’s degree in information security, cybersecurity, or a related field; equivalent education and relevant experience will also be considered. • Experience securing Microsoft 365, Microsoft Entra ID, Microsoft Intune, Windows, macOS, Google Workspace, and enterprise SaaS applications. • Security certification such as CompTIA Security+, CISSP, CISM, CEH, or an equivalent credential. Benefits: • Generous Paid Time Off : 4+ weeks of vacation and 13+ paid holidays • Parental Leave : 12 weeks fully paid for all parents • Retirement : 401(k) with 0.5:1 company match • Comprehensive Health Coverage : Medical, dental, and vision plans • Insurance : Company-paid life, short-term disability, and long-term disability, plus voluntary options including supplemental life, accident, and pet insurance Perks: • Volunteer Time Off: Give back through ClassLink Cares paid volunteer days • Lifelong Learning: Tuition reimbursement for continued education • Growth & Development: Coaching and internal programs to support career and personal growth • Supportive Culture: A workplace that values curiosity, compassion, and continuous learning • Connection & Community: Annual company retreats and team events with bright, fun coworkers At ClassLink, we believe the best ideas come from bringing together diverse perspectives. We are committed to building a team that reflects the diversity of the communities we serve and fostering a workplace where every team member feels valued, respected, and empowered to grow. ClassLink is proud to be an equal opportunity employer. We welcome candidates of all identities, backgrounds, and experiences, and we do not discriminate on the basis of race, color, religion, sex, gender identity, sexual orientation, national origin, age, disability, veteran status, or any other legally protected characteristic. ClassLink is powered by passionate people dedicated to improving learning in classrooms everywhere. We do this by creating and delivering great products and having fun along the way. Learn more about us at www.classlink.com . Salary Description 115,000.00- 125,000.00 plus bonus

Requirements

Must-haves

Our team is driven by purpose and grounded in three core values:
Strive to Grow - always learning, improving, and innovating.
Deliver Worthwhile Experiences - for our users, our partners, and each other.
Contribute with Heart - putting people first in everything we do.
Manage security controls across corporate endpoints, networks, firewalls, VPN, DNS filtering, and Zero Trust access.
Administer and monitor EDR, SIEM, identity, access management, MFA, DLP, encryption, and related security tools.
Monitor systems and network activity, investigate alerts, conduct threat hunting, and coordinate incident response and post-incident reviews.
Identify and prioritize vulnerabilities, oversee remediation and patching efforts, and monitor for configuration drift.
Establish and maintain security standards, hardening guidelines, policies, baseline configurations, and technical documentation.
Conduct access reviews, privileged-account reviews, device compliance audits, and SaaS application permission reviews.
Support compliance audits and certifications by gathering evidence, documenting controls, and tracking remediation activities.
Evaluate the security of vendors, SaaS platforms, AI services, browser extensions, integrations, and other technologies before adoption.
Develop security metrics and report on risks, trends, remediation progress, and the organization’s overall security posture.
Create security awareness programs and serve as a trusted resource for employees and cross-functional teams.
Develop and maintain a roadmap for strengthening ClassLink’s internal security environment.
This position is primarily remote, with up to 10% travel for company meetings, events, or other business needs.
NOTE : This job description is not intended to be all-inclusive. Employees may be asked to perform other related duties as assigned to meet the ongoing needs of the organization.
Five or more years of experience in information security, cybersecurity, or a related field.
Hands-on experience with SIEM, EDR, security monitoring, incident response, and vulnerability management.
Strong knowledge of endpoint, network, identity, access, and data security practices.
Experience with firewalls, VPN, DNS filtering, Zero Trust, MFA, patch management, encryption, and DLP.

Nice-to-haves

Bachelor’s degree in information security, cybersecurity, or a related field; equivalent education and relevant experience will also be considered.
Experience securing Microsoft 365, Microsoft Entra ID, Microsoft Intune, Windows, macOS, Google Workspace, and enterprise SaaS applications.
Security certification such as CompTIA Security+, CISSP, CISM, CEH, or an equivalent credential.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

Platform: paylocity
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Paid Time Off

Parental Leave