Security Platform and Vulnerability Management Specialist

VulnU; United States; Remote; USD 1,620,000 - 1,980,000; Full time

Benefits offered by this job

Learning budget

Ownership program (Dim the Lights)

Flexible work culture

Job summary

Instructure is seeking an experienced Security Platform and Vulnerability Management Specialist to drive strategy, implementation, and ongoing management of our security platforms and vulnerability management programs. This role will be remote and critical for protecting Instructure’s assets and securing our educational technology solutions.

You will collaborate with product security, engineering, operations, and development teams to embed security best practices into the software development

Qualifications

• 4+ years in information security with vulnerability mgmt or security platforms.
• Experience designing and running robust vulnerability programs.
• Strong cloud security knowledge (AWS, Azure, or GCP).
• Scripting for automation (Python/PowerShell).
• Security certifications (CISSP, CISM, GSEC, OSCP) desirable.

Responsibilities

• Develop and execute a comprehensive vulnerability management program across environments.
• Manage design, implementation, and optimization of security platforms (SIEM, SOAR, EDR, CSPM, IAM).
• Collaborate with product security, engineering, operations and dev teams to embed security in the SDLC/infra deployment.
• Develop and maintain security policies, standards and procedures for platforms and vulnerability management.
• Stay abreast of threats and provide remediation-focused recommendations.

Skills

Security mgmt

Cybersecurity

Security analytics

Automation

Education

Bachelor's in CS/InfoSec

Tools

SIEM

EDR

CSPM

IAM

Python

PowerShell

Job description

# Security Platform and Vulnerability Management SpecialistInstructure · instructure.comCategory: Vulnerability ManagementLocation: RemoteSalary: $1,800,000 – $2,100,000## Quality of lifeWhat the posting states. Hover or tap a perk to see the line it came from.* Learning budgetAt Instructure, we believe in the power of people to grow and succeed throughout their lives. Our goal is to amplify that power by creating intuitive products that simplify learning and personal development, facilitate meaningful relationships, and inspire people to go further in their education and careers.We do this by giving smart, creative, passionate people opportunities to create awesome. And that's where you come in:Instructure is seeking an experienced and motivated Security Platform and Vulnerability Management Specialist to drive the strategy, implementation, and ongoing management of our security platforms and vulnerability management programs. This role will be critical in protecting Instructure’s assets and ensuring the security of our educational technology solutions.Job ResponsibilitiesDevelop and execute a comprehensive vulnerability management program, encompassing regular scanning, penetration testing coordination, risk assessment, prioritization, and remediation tracking across all environments.Manage the design, implementation, and optimization of security platforms, including but not limited to SIEM, SOAR, EDR, CSPM, and IAM solutions.Support the evaluation, selection, and integration of new security technologies and tools to enhance our defensive capabilities and operational efficiency.Collaborate closely with product security, engineering, operations, and development teams to embed security best practices into the software development lifecycle and infrastructure deployment processes.Develop and maintain security policies, standards, and procedures related to security platforms and vulnerability management.Stay abreast of emerging security threats, vulnerabilities, and industry best practices, making recommendations for continuous improvement.Prepare and present reports on security posture, vulnerabilities, and remediation efforts to technical and non-technical stakeholders.RequirementsBachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.4+ years of experience in information security, with experience in security platforms and/or vulnerability management.Deep expertise in various security technologies such as SIEM, EDR , CSPM, and IAM solutions.Proven experience designing, implementing, and managing robust vulnerability management programs.Strong understanding of cloud security principles and best practices for platforms like AWS, Azure, or GCP.Experience with scripting languages (e.g., Python, PowerShell) for automation and data analysis.Experience with AI and leveraging AI to accelerate problem solving.Excellent analytical, problem-solving, and communication skills, with the ability to articulate complex security concepts to diverse audiences.Relevant security certifications (e.g., CISSP, CISM, GSEC, OSCP) are highly desirable.Experience in a SaaS environment is a plus.Get in on all the awesome at Instructure!We offer competitive, meaningful benefits in every country where we operate. While they vary by location, here's a general idea of what you can expect:Competitive compensation, plus all full-time employees participate in our ownership program - because everyone should have a stake in our success.Flexible work culture. Our remote, hybrid and in-office collaboration spaces vary by role, team and location.Generous time off, including local holidays and our annual “Dim the Lights” period in late December, when teams are encouraged to step back and recharge based on departmental needs.Comprehensive wellness programs and mental health supportLearning and development resources, including professional development tools and tuition reimbursement, to support your growthThe technology and tools you need to do your best workMotivosity employee recognition programA culture rooted in inclusivity, support, and meaningful connectionWe believe in hiring great people and treating them right. The more diverse we are, the better our ideas and outcomes.Instructure is an Equal Opportunity Employer. We comply with applicable employment and anti-discrimination laws in every country where we operate.All employees must pass a background check as part of the hiring process. To help protect our teams and systems, we’ve implemented identity verification measures. Candidates may be asked to verify their legal name, current physical location, and provide a valid contact number and residential address, in accordance with local data privacy laws.Any attempt to misrepresent personal or professional information will result in disqualification.