Information Security Engineer

Edmentum; Oregon; Hybrid; USD 105,000 - 120,000; Full time

Job summary

Edmentum, a remote-first educator-focused company, seeks a security professional to monitor production systems, conduct vulnerability assessments, and ensure compliance across FERPA, COPPA, GDPR, NIST, and SOC 2. You will evaluate tools, explore AI technologies, and partner with dev, systems, and network teams to bake security into all builds and operations.

You should have 3–5 years in enterprise IT security, a tech degree, and hands-on vulnerability remediation experience.

Qualifications

• 3–5 years of enterprise IT security experience.
• Bachelor’s degree in technology or equivalent.
• Strong security principles across OS and platforms.
• Hands-on vulnerability scanning and remediation.
• Familiar with NIST CSF, NIST 800, ISO 27001, SOC 2, FERPA, COPPA, GDPR.
• Understanding SDLC: Waterfall and Agile.
• Clear communicator and team player.
• Pursuing or holding CISA/CISSP/PMP.
• Experience in offensive security is a plus.
• Experience with AI systems risks is a plus.

Responsibilities

• Monitor production systems for security events and incident response.
• Run vulnerability assessments and remediation.
• Support compliance with FERPA, COPPA, GDPR, NIST, SOC 2.
• Evaluate security tools and explore AI technologies.
• Partner with development, systems and network teams to bake security in.
• Improve change/configuration management and security metrics.

Skills

Vulnerability scanning

Security frameworks

NIST CSF

ISO 27001

SOC 2

Regulatory compliance

SDLC security

Certifications (CISA/CISSP/PMP)

Offensive security

AI security awareness

Communication skills

Education

Bachelor's degree in technology

Job description

WHO WE AREEdmentum is a dynamic educator and student-focused company dedicated to tech-enabled learning solutions. Our goal is to ensure that all students have access to flexible learning environments and educators have the tools they need to support their students. We are on a mission to create innovative, proven learning technology, partnering with educators to ignite student potential. We are a Remote First organization with a strong commitment to excellence, innovation, and customer satisfaction.

What You'll Do

• Monitor production systems for security events, take part in incident response, and help keep Edmentum's data and infrastructure secure and available.
• Run vulnerability assessments, drive remediation, and apply proven risk frameworks to close security gaps.
• Support compliance with FERPA, COPPA, GDPR, NIST, and SOC 2, helping keep Edmentum audit-ready.
• Evaluate and administer security tools, and explore emerging technologies, including AI, to strengthen our defenses.
• Partner with development, systems, and network teams to build security into how we build and operate.
• Improve change management, configuration management, and security metrics, and help find root causes after incidents.

Who You Are

• You have 3 to 5 years of experience supporting and securing enterprise IT infrastructure, ideally in a SaaS environment.
• You have a bachelor's degree in a technology-related field or equivalent hands‑on experience.
• You have a solid grasp of core security principles and experience securing enterprise infrastructure, operating systems, and platforms.
• You have hands‑on experience with vulnerability scanning, assessment, and remediation.
• You are familiar with frameworks and regulations such as NIST CSF, NIST 800, ISO 27001, SOC 2, FERPA, COPPA, and GDPR, and can apply them to real‑world work.
• You understand SDLC methodologies, including Waterfall and Agile, and how to build security into them.
• You are a clear communicator and strong collaborator who works well independently and with teams at every level.
• You have, or are working toward, certifications such as CISA, CISSP, or PMP.
• You have a passion for learning and stay current on evolving security threats, tools, and best practices.
• You have exposure to offensive security, such as penetration testing, red teaming, or application security (a plus).
• You have experience with AI systems and AI‑specific risks such as prompt injection and insecure agent behavior (a plus).
• You are willing to take on evolving responsibilities based on business needs.

Preferred location in Minneapolis, MN

Job Application Deadline: November 15, 2026 or until filled

Pay range for this role:$105,000—$120,000 USD

At Edmentum, we are committed to pay transparency. The salary range provided reflects market research, the responsibilities of the role, and alignment with our compensation principles. Actual compensation will be determined based on multiple factors, including, but not limited to, relevant experience and skill sets. All compensation decisions are individualized and based on the specific circumstances of each candidate.

We also offer a comprehensive benefits package to support your overall well‑being and work‑life balance. This includes medical, dental, and vision insurance with various plan options, a 401(k) retirement plan with company matching, and a time away program, volunteer time away, and a winter office closure at the end of December. Additionally, we provide resources to promote wellness, ensuring you have the support you need both professionally and personally. Our goal is to provide a benefits package that helps you thrive in all aspects of life.

Edmentum is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, national origin, ancestry, sex, age, disability, status as a disabled, recently separated, Armed Forces service medal or other protected veteran ("covered veteran"), marital status, status regarding public assistance, sexual orientation or any other characteristic protected by applicable federal, state or local laws.

As part of our hiring process, we may use AI‑powered tools to support our HR team in reviewing, screening, and managing applications. These tools aim to improve efficiency, consistency, and fairness, but final decisions are made by our people. Applicants' personal information (e.g., resume, cover letter, qualifications, and application responses) may be processed by third‑party AI tools for tasks like resume parsing, skills matching, candidate ranking, and interview scheduling.

Edmentum's notice regarding the collection of personal information from interested candidates is available here