At Instructure, we believe in the power of people to grow and succeed throughout their lives. Our goal is to amplify that power by creating intuitive products that simplify learning and personal development, facilitate meaningful relationships, and inspire people to go further in their education and careers.
We do this by giving smart, creative, passionate people opportunities to create awesome. And that's where you come in:
Instructure is seeking an experienced and motivated Security Platform and Vulnerability Management Specialist to drive the strategy, implementation, and ongoing management of our security platforms and vulnerability management programs. This role will be critical in protecting Instructure’s assets and ensuring the security of our educational technology solutions.
Job Responsibilities
Develop and execute a comprehensive vulnerability management program, encompassing regular scanning, penetration testing coordination, risk assessment, prioritization, and remediation tracking across all environments.
Manage the design, implementation, and optimization of security platforms, including but not limited to SIEM, SOAR, EDR, CSPM, and IAM solutions.
Support the evaluation, selection, and integration of new security technologies and tools to enhance our defensive capabilities and operational efficiency.
Collaborate closely with product security, engineering, operations, and development teams to embed security best practices into the software development lifecycle and infrastructure deployment processes.
Develop and maintain security policies, standards, and procedures related to security platforms and vulnerability management.
Stay abreast of emerging security threats, vulnerabilities, and industry best practices, making recommendations for continuous improvement.
Prepare and present reports on security posture, vulnerabilities, and remediation efforts to technical and non-technical stakeholders.
Requirements
Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
4+ years of experience in information security, with experience in security platforms and/or vulnerability management.
Deep expertise in various security technologies such as SIEM, EDR , CSPM, and IAM solutions.
Proven experience designing, implementing, and managing robust vulnerability management programs.
Strong understanding of cloud security principles and best practices for platforms like AWS, Azure, or GCP.
Experience with scripting languages (e.g., Python, PowerShell) for automation and data analysis.
Experience with AI and leveraging AI to accelerate problem solving.
Excellent analytical, problem-solving, and communication skills, with the ability to articulate complex security concepts to diverse audiences.
Relevant security certifications (e.g., CISSP, CISM, GSEC, OSCP) are highly desirable.
Experience in a SaaS environment is a plus.
Get in on all the awesome at Instructure!
We offer competitive, meaningful benefits in every country where we operate. While they vary by location, here's a general idea of what you can expect:
Competitive compensation, plus all full-time employees participate in our ownership program - because everyone should have a stake in our success.
Flexible work culture. Our remote, hybrid and in-office collaboration spaces vary by role, team and location.
Generous time off, including local holidays and our annual “Dim the Lights” period in late December, when teams are encouraged to step back and recharge based on departmental needs.
Comprehensive wellness programs and mental health support
Learning and development resources, including professional development tools and tuition reimbursement, to support your growth
The technology and tools you need to do your best work
Motivosity employee recognition program
A culture rooted in inclusivity, support, and meaningful connection
We believe in hiring great people and treating them right. The more diverse we are, the better our ideas and outcomes.
Instructure is an Equal Opportunity Employer. We comply with applicable employment and anti-discrimination laws in every country where we operate.
All employees must pass a background check as part of the hiring process. To help protect our teams and systems, we’ve implemented identity verification measures. Candidates may be asked to verify their legal name, current physical location, and provide a valid contact number and residential address, in accordance with local data privacy laws.
Any attempt to misrepresent personal or professional information will result in disqualification.