Senior Security Engineer Application & Cloud Security - MagicSchool

WHO WE ARE: MagicSchool is the premier generative AI platform for teachers. We're just over 2 years old, and more than 7 million teachers from all over the world have joined our platform. Join a top team at a fast growing company that is working towards real social impact. Make an account and try us out at our website and connect with our passionate community on our Wall of Love .

Senior Security Engineer

Role Description

As Senior Security Engineer (Application & Cloud Security), you will serve as the primary security enabler for our Engineering, Product, and Design teams - building the practices, tooling, and trust that allow developers to move fast without introducing risk. You'll report directly to the Director of IT and play a critical role in protecting the systems educators and students rely on every day.

MagicSchool is operating in a compliance-critical environment serving millions of educators and students. The security foundation is being actively built - not inherited - and this role is central to getting it right.

Responsibilities

In this role, you will be responsible for driving towards the following outcomes:

Secure Development Lifecycle & Vulnerability Management: Champion secure development practices including threat modeling, code reviews, and dependency monitoring. Lead the implementation and ongoing management of StackHawk and GitHub Advanced Security for automated scanning, triage emerging threats like compromised packages and zero-day disclosures, and build developer-friendly workflows that integrate security without sacrificing velocity.

Infrastructure & Architecture Security: Partner with IT and engineering leadership to maintain core security infrastructure - including firewall management, content filtering, and privilege access controls. Serve as a trusted security advisor in architecture conversations, helping teams design systems that are secure by default across AWS, Google Cloud, and on-prem environments.

Identity & Access Management: Own the end-to-end IAM security strategy across cloud (AWS, GCP), SaaS, and internal tooling — including identity lifecycle management, SSO/SAML/OIDC configuration, role-based and attribute-based access controls, and zero-trust access patterns. Partner with IT and engineering to enforce least-privilege principles, govern developer and service account access, and build scalable access review processes that hold up under SOC 2 scrutiny.

Red Teaming & Threat Assessment: Design and execute threat modeling exercises tailored to the unique attack surface of an AI-powered EdTech platform - including student data exposure, AI model misuse, and high-risk windows such as fundraising cycles. Plan and oversee red team assessments, either internally or through third-party partners.

Incident Response & Preparedness: Serve as first responder and on-call point of contact for security i