Senior Security Engineer (Application & Cloud Security)

WHO WE ARE: MagicSchool is the premier generative AI platform for teachers. We're just over 2 years old, and more than 5.5 million teachers from all over the world have joined our platform. Join a top team at a fast growing company that is working towards real social impact. Make an account and try us out at our website and connect with our passionate community on our Wall of Love.

Role Description:

As Senior Security Engineer (Application & Cloud Security), you will lead the development of secure engineering practices across our products and infrastructure. In this hands-on, individual contributor role, you’ll drive threat modeling, secure architecture, and application security across our multi-cloud stack while partnering with teams across engineering, product, IT, and compliance. You’ll report directly to the VP of Engineering and play a critical role in protecting the systems educators and students rely on every day. This position is Remote (US-based).

Responsibilities:

In this role, you will be responsible for driving to the following outcomes:

• Secure Development Lifecycle: Champion secure development practices including threat modeling, code reviews, and vulnerability management. Lead the evaluation and implementation of tooling such as SAST, DAST, and SCA, and build developer-friendly workflows to “shift security left.”

• Secure Architecture & Design: Collaborate with product and engineering teams to design secure systems and deployment models grounded in zero trust principles. Serve as a trusted advisor on cloud security best practices across AWS and Google Cloud environments.

• Internal Enablement: Lead security education programs for engineers and staff, including workshops, incident simulations, and best practice sharing. Coach engineers on practical security techniques and tradeoffs in the software development lifecycle.

• Security Assessments & Red Teaming: Plan and execute internal offensive security exercises, including red team–style assessments, penetration testing, and adversary emulation.

• Incident Response & Preparedness: Own and evolve security incident response playbooks. Collaborate with technical and operational teams on real-world incident response and postmortems.

• Cross-Functional Alignment: Partner with IT and Compliance to support programs aligned with SOC 2, FERPA, and COPPA, ensuring engineering efforts align with our regulatory commitments.

Experience & Qualifications:

To be successful in this role, you’ll bring the following experience and qualifications:

• Professional Experience: At least 5 years of experience in application or cloud security, with a track record of advancing security practices in fast-paced technical environments.

• Security Expertise: Hands-on experience with secure development tooling (SAST, DAST, SCA), and cloud-native security within AWS and/or Google Cloud. Prior involvement in offensive security or red teaming.

• Threat Modeling & Architecture: Strong experience conducting or facilitating threat modeling, whether using formal frameworks (e.g., STRIDE, PASTA) or more lightweight and iterative team-based approaches.

• Communication & Influence: Ability to communicate complex security topics to both technical and non-technical stakeholders. Skilled in influencing engineering teams and leading by example.

• Mentorship & Enablement: Experience coaching engineers or teams on security principles and integrating security without compromising developer velocity.

Nice to Have:

• Experience supporting security components of SOC 2, FERPA, or COPPA programs

• Prior experience in a high-growth startup or fast-paced engineering environment

Notice: Priority Deadline and Review Start Date

Please note that applications for this position will be accepted until 7/18/25 — applications received after this date will be reviewed on an intermittent basis. While we encourage early submissions, all applications received by the priority deadline will receive equal consideration. Thank you for your interest, and we look forward to reviewing your application.

Why Join Us?

• Work on cutting-edge AI technology that directly impacts educators and students.

• Join a mission-driven team passionate about making education more efficient and equitable.

• Flexibility of working from home, while fostering a unique culture built on relationships, trust, communication, and collaboration with our team - no matter where they live.

• Unlimited time off to empower our employees to manage their work-life balance. We work hard for our teachers and users, and encourage our employees to rest and take the time they need.

• Choice of employer-paid health insurance plans so that you can take care of yourself and your family. Dental and vision are also offered at very low premiums.

• Every employee is offered generous stock options, vested over 4 years.

• Plus a 401k match & monthly wellness stipend

Our Values:

• Educators are Magic:  Educators are the most important ingredient in the educational process - they are the magic, not the AI. Trust them, empower them, and put them at the center of leading change in service of students and families.

• Joy and Magic: Bring joy and magic into every learning experience - push the boundaries of what’s possible with AI.

• Community:  Foster community that supports one another during a time of rapid technological change. Listen to them and serve their needs.

• Innovation:  The education system is outdated and in need of innovation and change - AI is an opportunity to bring equity, access, and serve the individual needs of students better than we ever have before.

• Responsibility: Put responsibility and safety at the forefront of the technological change that AI is bringing to education.

• Diversity: Diversity of thought, perspectives, and backgrounds helps us serve the wide audience of educators and students around the world.

• Excellence:  Educators and students deserve the best - and we strive for the highest quality in everything we do.