[Hiring] Senior Information Security Engineer @Frontline Education

Role Description

We are seeking a Senior Information Security Engineer 2 for an exciting opportunity to be part of a small security team and growing company, in an evolving industry. The Senior Security Engineer will report to the CISO and engage other stakeholders across the organization to drive change and promote security. This position is USA only, remote.

Our mission is very broad, and our team is small and agile. We will look toward your unique skills to approach and solve problems in your own way. Whether engineering a system to address a technical security hurdle, protecting our customers' data, or consulting on a wide range of security topics, you are empowered to engage and lead cross-functionally. In the role of Senior Information Security Engineer, you will focus on the evaluation, architecture, development, deployment, and operation of network, endpoint, and cloud security solutions.

Responsibilities:

• Engineer, implement and monitor security measures for the protection of computer systems, networks and information.
• Design, build and deploy next-generation cloud security practices, controls, and technologies to protect Frontline's public and private cloud infrastructure.
• Work across product, infrastructure and business systems teams to enhance and evangelize security in cloud infrastructure.
• Research emerging technologies and maintain awareness of current security risks in support of security enhancement and development efforts.
• Assist with driving changes needed to respond to emerging threats and implement countermeasures.
• Lead initiatives to develop and build security utilities and tools that will enable others to operate more efficiently and securely in cloud environments.
• Develop and maintain automation scripts or internal tools to improve the efficiency and consistency of security operations.
• Lead the Security Incident Response Team (SIRT) efforts to respond to information system security incidents, including investigation of, countermeasures to, and recovery from computer-based attacks, unauthorized access, and policy breaches.
• Create and maintain incident response runbooks, conduct tabletop exercises, and perform post-incident reviews to improve readiness.
• Support the CISO in strengthening incident readiness posture and response maturity across the organization.
• Conduct regular security assessments of a suite of applications (internally developed and acquired through M&A).
• Integrate security controls into CI/CD pipelines by enabling SAST, DAST, and software composition analysis (SCA) tooling.
• Collaborate with development teams to embed security throughout the software development lifecycle (SSDLC).
• Participate in threat modeling and security architecture reviews to guide secure design of applications and infrastructure.
• Create automated tests to encourage and enforce security standards.
• Play a key role in the cross-functional effort to define secure configuration standards for key technology platforms.
• Analyze information systems utilizing various cybersecurity techniques including packet analysis tools, forensics tools, intrusion prevention systems, firewalls, SIEM solutions, and vulnerability assessment software to aid in the detection and prevention of cyberattacks.
• Perform vulnerability assessments and penetration tests of systems and networks and prioritize remediation efforts.
• Deploy and manage security technologies such as firewalls, web application firewalls, proxy systems, logging, and other security devices, threat detection tools.
• Conduct and monitor Independent Validation and Verification (IV&V) testing for software applications and systems.
• Help design and implement processes and technology solutions to assess, monitor, audit, and enforce compliance with internal and regulatory requirements, such as ISO27001, PCI, SOC, and others.
• Create detailed business, technology, operational, and security requirements.
• Understand, develop, implement, and monitor technical and non-technical policies, procedures, processes, and workflows.
• Assist the CISO in shaping and operationalizing security engineering initiatives and strategic roadmaps.
• Solution delivery / implementation (directly or through partnerships).
• Support third-party vendor assessments and monitor external partners for ongoing security risks.
• Respond to customer and stakeholder security inquiries, including security questionnaires and due diligence requests.
• Lead technical mentorship and knowledge-sharing initiatives across engineering teams to champion security best practices.

Qualifications

• Bachelor's degree or equivalent work experience in Information Technology, Cyber Security, Management of Information Systems, Computer Science, Informatics, Information Science or similar discipline.
• 8+ years' experience working in IT, security engineering, application security, enterprise SaaS infrastructure environment, or similar role(s).
• 3+ years of experience in software/application security required.
• Security certification such as CEH, CISSP, CISA, CISM, CRISC or equivalent required.
• Strong working knowledge of TCP/IP networking and common protocols.
• Experience with and understanding of cryptography.
• Knowledge of a broad range of security controls and risk management frameworks NIST, ISO 2700x, PCI-DSS, SOC, and other similar standards.
• Knowledge of regulatory compliance issues such as FERPA, HIPAA, SOX, GLBA, and PCI.
• Experience with centralized log management tools.

Benefits

• Personalized Time Off: Take time when it's needed most - whether that's a family vacation, a reset day, or simply time to rest and refocus.
• Paid Sick Time: Separate, dedicated sick leave to care for yourself or loved ones.
• Volunteer Time Off: Paid time to give back and support causes that matter to you.
• Ten Paid Holidays: Enjoy meaningful moments and traditions throughout the year.
• World-Class Learning Access: Explore thousands of on-demand courses through platforms like LinkedIn Learning.
• Leadership & Technical Skill Building: Develop new capabilities and chart your own professional path.
• AI Empowerment: Use OpenAI tools to build fluency with emerging technology and harness AI as a creative partner for innovation and problem-solving.
• Tuition Reimbursement: Invest in formal education to advance your skills and career.
• Ongoing Learning Culture: Participate in company-led webinars on AI, inclusion, and industry trends - designed to inspire curiosity and continuous improvement.
• Wellness Initiatives: Company-sponsored programs that support physical, mental, and emotional well-being.
• Employee Assistance Program (EAP): Confidential support for you and your family's needs.
• Comprehensive Benefits: Health and financial benefits that support your happiness and future.
• A Culture That Cares: At Frontline Education, we want every team member to learn, grow, and thrive - personally, professionally, and purposefully.
• Bonus opportunities.
• 401(k) with company match.
• Employee Stock Purchase Plan (ESPP).
• Comprehensive health and wellness benefits.
• Personalized PTO.
• Tuition reimbursement and professional development support.

Company Description

At Frontline Education, we're reimagining what's possible by becoming an AI-first organization, transforming how we think, work, and serve the educators who shape our schools every day. By using AI in thoughtful, practical ways, we're creating tools that help educators save time, gain insights, and focus more on what matters most - their students.

As part of our team, you'll be expected and empowered to build and apply AI skillsets that grow with you, because at Frontline Education, technology amplifies what matters most: the human drive to learn, improve, and make a difference.