Principal Security Engineer

Scholastic is seeking a Principal Security Engineer to join our Information Security team. In this role, you will proactively identify, assess, and reduce security risks across our network, systems, applications, and third-party ecosystem. You will design and implement security architecture, lead engineering efforts for security tooling, and automate security controls to support compliance and enhance our overall security posture.

• Design and implement security architecture across cloud, network, endpoint, and application environments
• Lead engineering efforts to build, tune, and scale security tooling (SIEM, EDR, vulnerability management, etc.)
• Automate security controls and evidence collection for audit and compliance programs (SOX, PCI DSS, SOC 2)
• Serve as an escalation point for SOC incidents and lead incident response activities
• Develop metrics and KPIs to demonstrate security posture and control effectiveness
• Mentor and provide technical leadership to other security team members