Scholastic

Scholastic

Principal Security Engineer

New York, New York · Principal · Full-time

Sponsorship not specified$165k-$185kDetected 16 days ago
JavaScriptJavaC++C#RESTCybersecuritySIEMSOC OperationsIncident ResponseComplianceFirewallResearchLeadershipCommunicationInternal Audit

Stay score

odds of building a lasting career here

59Sponsors, lottery-bound
Cap-exempt (no lottery)0
Sponsors this role80
Entry-level history0
PERM / green-card track0
Lottery odds (Level IV)94
Fits your clock70

Sponsors, but it's cap-subject — you still face the weighted lottery (~61% per draw at Level IV). Good if you win; have a cap-exempt backup on your list.

Lottery odds assume a STEM candidate.

Personalize to your clock →

Community outcomes

No reports yet — be the first to help the next applicant.

About the role

  • NOTE: This role is based in New York City and encourages a minimum of two days per week in the SoHo office.
  • Some roles or teams may require additional in-office attendance if the essential functions of the role require it.
  • The Principal Security Engineer will be part of the Scholastic Security organization and report to the Executive Director of Information Security and Compliance.

Responsibilities

  • Design and implement security architecture and controls across cloud, network, endpoint, and application environments.
  • Work closely with team members to enhance, implement, and configure scalable security technologies and improve detection and response capabilities.
  • Lead engineering efforts to build, tune, and scale security tooling, including SIEM, EDR, vulnerability management, identity and access management, TPRM and secrets management platforms.
  • Work closely with the SOC to review, develop, and maintain incident response playbooks.
  • Serve as an escalation point for SOC incidents, providing technical guidance and support during investigation and response activities.
  • Develop metrics and KPIs that demonstrate security posture, control effectiveness, and tooling consolidation progress.
  • Automate security controls and evidence collection to support audit and compliance programs, including SOX IT General Controls, PCI DSS, SOC 2.
  • Lead and assist in security risk assessments for systems and applications
  • Perform security reviews, identify gaps in security architecture, and develop a security risk management plan
  • Develop policies, procedures, and standards that meet existing and newly developed policy and regulatory requirements, including SOX, PCI, and Privacy

Requirements

  • A bachelor's degree in information systems, engineering, or equivalent work experience

Nice to have

  • Minimum 10+ years of experience in designing and implementing security solutions, including IAM, EDR, MDM, SIEM, KMS, and PAM
  • 5+ years of experience in a Security Operations Center or Continuous Monitoring role
  • 5+ years working and supporting Incident Response functions
  • Hands-on experience with software development languages and technologies, including Java, C#, C++, JavaScript, and HTML.
  • Experience managing application security testing tools, including SAST, DAST, and open-source vulnerability scanning.
  • Experience implementing SOX, PCI, NIST CSF, CIS Controls, and SANS Controls is required.
  • Ability to work in a highly fast-paced environment with high expectations
  • Candidates with the following certifications are preferred: ISC2, SANS, ISACA, or other recognized security professional credentialing organizations

Skills

  • Continuously improve the security framework, methodology, standards, and system of internal controls

Compensation

  • Further, all personnel actions (such as compensation, tuition aid, benefits, transfers, promotions, and dismissals, company-sponsored training, social and recreational programs) shall be administered without discrimination.
  • Pay Transparency Provision
  • Annual Salary: 165,000.00 - 185,000.00

Benefits

  • Full suite of health and wellness benefits (including a $0 deductible Medical Plan)
  • Retirement Savings Plan 401(k) with options for both Roth and Traditional Contributions
  • Tuition-Free programs for undergraduate and graduate degrees
  • Generous Parental Leave Program
  • Employee Stock Purchase Plan (ESPP) with opportunity for discounted stock at a 15% discount

Company info

  • THE OPPORTUNITY The Principal Security Engineer will be part of the Scholastic Security organization and report to the Executive Director of Information Security and Compliance.

Equal opportunity

  • Scholastic is an Equal Opportunity Employer.
  • EEO Scholastic Policy Statement
  • EEO Statement:
  • EEO is the Law Poster
Apply directly at Scholastic →Create a free account for alerts like thisView Scholastic immigration profile

This listing is sourced directly from Scholastic's careers page and normalized into a canonical job model.