Senior Security Engineer

Ellevation

Ellevation

Software Engineering
Remote
Posted on Thursday, January 11, 2024
Over the last 11 years, Ellevation Education has built a thriving business serving the administrators, teachers, and specialists who support English Learners at public schools across the US. Today, over 1,200 school districts use our software to manage their EL programs. We are a successful, rapidly growing business with a real mission -- helping English Learners achieve all they possibly can.
As a dedicated security engineer on the Cloud Operations team at Ellevation, you will play a key role in driving a focused investment in improving our security posture and ensuring our business and our customers are protected. You will be closely aligned with our other platform teams, defining secure development and operational practices and implementing them across the Engineering organization. You will also be hands-on in developing and maintaining the systems and tooling that enable security at Ellevation.
You are extremely comfortable weighing tradeoffs, generating options, and assessing risks. You excel in finding development paths that incrementally deliver value along the way to broader goals. And you are comfortable in any part of the stack, going deep where necessary.
We look for engineers who are excited to use their technical skills and experience in support of a mission-driven company. We work in small, product-centric teams empowered to make a difference in a particular product or aspect of a product. Our teams are remote-friendly and highly collaborative. To accomplish this we set core hours of 10AM - 4PM (Eastern) and expect to meet in person (often in Boston) about 4 times per year.

Some of the things you will accomplish:

  • Own the organization’s Secure Software Development Lifecycle and champion a shift security left approach
  • Develop and improve our capabilities for detecting vulnerabilities in our applications
  • Coordinate penetration tests and the prioritization and remediation of vulnerabilities found
  • Empower development teams to track, prioritize, and remediate security vulnerabilities in our applications
  • Build and implement tools to assist secure application development with an emphasis on automation and quality

About you:

  • 5+ years of experience working in cyber security or information security in a software development organization
  • Experience with SDLC/operational maturity models such as BSIMM & CMMI
  • Strong skills in Application Security and secure software development
  • Experience working on Threat Modelling and Security architecture reviews
About Us:
At Ellevation, we develop world-class software to help educators serve the fastest growing population of K-12 students: English Learners (ELs). Ellevation helps school districts transform their Multilingual Learner programs and ensure all students can achieve their highest aspirations. Our product suite includes a best-in-class data and instructional planning platform, resources to build teacher capacity, and student-facing programs to teach academic language.
We are a fast-growing, mission-driven technology company partnering with over 1,500 school districts and more than 2 million current and former English Learners. Over the next five years, we plan to double the number of ELs we serve and drive measurable outcomes for students. Ellevation merged with Curriculum Associates in 2021 to accelerate impact for Multilingual Learners. Our company continues to operate independently and is well-capitalized to support our ambitious social and financial objectives.
Why Ellevation?
In addition to our great benefits and competitive salaries, here are some things that make us unique:
+ Mission-driven organization where team members are empowered to make a significant impact
+ Opportunities to join DEIB-focused groups and support building a culture of belonging
+ Professional development and growth opportunities
+ Company and team offsites in various cities across the United States
+ Collaborative workspace in the heart of Boston - a stone's throw from many central T stops (Downtown Crossing, Government Center, and Aquarium). Free snacks, beverages, and local organic fruit provided
+ Remote and in-person engagement opportunities, including happy hours, themed events, and competitions
+ Remote and in-person wellness programming to support team’s mental and physical wellbeing
Learn more about our team in our Culture Deck.
Here at Ellevation, we champion diversity, inclusion, equity, and belonging. We strive to build a team that reflects the diverse communities we serve. We are committed to creating an inclusive workplace that promotes and values a range of ideas and opinions.
We believe in building a culture where productivity can flourish, one that is empathetic, respectful, and inclusive. We are proud to have been recognized in prior years as “Best Tech Workplace for Diversity” by the Timmy Awards for investing in training around inclusive behaviors, microaggressions, unconscious bias, and fostering a culture of continuous learning and feedback across the company. We are encouraged by our progress, but there’s more work to be done.
Benefits – Benefits eligible employees (and qualifying dependents) are covered by medical, dental, vision, and basic life insurance. Employees can enroll in our company's 401(k) retirement plan and receive an employer match up to 50% on the first 7% of your contribution, with pre-tax and Roth options. Employees have access to flexible paid time off for vacations, sick and disability policy, additional 10 paid company holidays, 2 floating holidays and a winter office closure between Christmas and New Year's. In addition, we provide a generous parental leave benefit, back-up childcare or eldercare, and a variety of other perks to support the health and well-being of our employees.
Additional Information: Ellevation operates under Curriculum Associates, LLC, an Equal Opportunity Employer. Curriculum Associates, LLC will not discriminate against any employee or applicant for employment because of race, color, creed, religion, sex, national origin, age, marital status, veteran status, sexual orientation, gender identity or expression, disability, genetic information, or any other category protected by law. Curriculum Associates, LLC will grant employment, without regard to race, color, creed, religion, sex, national origin, age, marital status, veteran status, sexual orientation, gender identity or expression, disability, genetic information, or any other category protected by law. Such action shall include, but not be limited to, the following: employment, upgrading, demotion, transfer, recruitment or recruitment advertising, layoff or termination, rates of pay or other forms of compensation.
Our company uses E-Verify to confirm the employment eligibility of all newly hired employees. To learn more about E-Verify, including your rights and responsibilities, please visit www.uscis.gov/e-verify.
Information that you provide when applying for employment with Curriculum Associates, LLC may be subject to the California Privacy Rights Act. Click here for more information about our data-collection practices and your rights related to that data.
#LI-REMOTE