Staff Security Engineer

About Coursera

Coursera was founded in 2012 by Stanford professors Andrew Ng and Daphne Koller to make world-class learning accessible to everyone, everywhere. Today, over 190 million learners and 375+ university and industry partners use our platform to gain skills in fields like AI, data science, technology, and business. As a Delaware public benefit corporation and Certified B Corp, we're driven by the belief that learning can transform lives through learning.

Why Join Us

At Coursera, we're looking for inventors, innovators, and lifelong learners ready to shape the future of education. You'll help build global programs and tools that power online learning for millions turning bold ideas into real impact. People who thrive here are customer-first builders who move fast, simplify ruthlessly, and iterate relentlessly on the metrics that matter. 

We're a globally distributed team and let you choose the best way you work, whether it's from home, a Coursera hub, or a co-working space near you. Our virtual hiring and onboarding make it easy to join us and start making an impact from anywhere. If you're ready to make a global impact, scale unique products exclusive to Coursera, and expand your career horizons, apply below.

Job Overview:

Coursera is an engineering-first company. Our teams are responsible for maintaining a scalable and reliable platform, in addition to building interactive products for the worldwide learner community. We are made up of teams ranging from Development Infrastructure, Growth, Learner/Consumer Experience, Content Platform, and SDET Engineering. Every day, Engineering teams collaborate with cross-functional partners, including other engineers, data scientists, and product managers.

Responsibilities:

• Implement and manage the Information Security Program including security incident response, vulnerability management, data protection, and risk management
• Plan and execute vulnerability assessments of our products and services associated with cloud infrastructure.
• Lead Cybersecurity Incident Response Team (CIRT): triage, respond to and investigate security incidents affecting platform and services
• Lead regulatory readiness assessments and development of appropriate compliance strategies (SOX, SOC2, FERPA, ISO27001, NIST, etc.)
• Documenting and maintaining security policies, standards, guidelines, processes and procedures, and other related documents, as requested, and representing the Security Team during internal and external audits
• Working with Sales, lead the response to customer questionnaires dealing with our security and data protection policies. Review Information Security and privacy related requirements in contracts and provide input to Legal Team
• Perform technical security assessments, architecture and design reviews of Coursera's products, applications, services and cloud infrastructure
• Provide security expertise and guidance to all Coursera engineering and business teams
• Develop technical solutions to help mitigate security vulnerabilities
• Establishing and coordinating remediation and mitigation for identified security risks
• Ensuring technical security controls are in place, maintained and audited on a periodic basis

Qualifications:

• 10+ years' of working experience in an Information Security and Compliance role
• Have solid knowledge of ISO 27001, NIST and other information security standards and have practical experience implementing these standards
• Solid foundation and good technical knowledge of security engineering, computer and network security, authentication, security protocols and cryptography
• 5+ years experience in security architecture and technical security designs for cloud systems infrastructure and corporate networks and systems
• 5+ years of vulnerability assessments and penetration testing
• 5+ years of AWS foundation services related to computing, networking, storage, content delivery, administration and security, deployment and management, instrumentation and automation technologies.

Nice to haves:

• Certifications such as: CISSP, CISA, CISM, CCSP, AWS Architect or Certified Security is a plus

Compensation

This role is available in the following US Pay Zones:

Zone 1: $190,160 - $223,725 

Zone 2: $184,110 - $216,600

Zone 3: $168,760 - $198,550 

Zone 4: $157,460 - $185,250 

At Coursera, we offer competitive, zone-based pay aligned to your location, experience, and role level across four U.S. pay zones. Our total rewards package goes beyond salary, with comprehensive health and wellness benefits, bonus and RSU equity programs, and global perks designed to help you grow and thrive wherever you are.

US Pay Zones:

• US-Z1: Bay Area
• US-Z2: NYC and Seattle Metro
• US-Z3: CA, WA, NY, NJ, CO, CT, DC, GA, IL, MA, MD, OR, RI, TX, VA
• US-Z4: AK, AZ, DE, FL, HI, ID, IN, IA, KS, KY, MI, MN, MO, MT, NC, NV, NH, OH, OK, PA, SC, TN, UT, VT, WI

If this opportunity interests you, you might like these courses on Coursera:

• Secure Software Design
• Enterprise and Infrastructure Security
• IT Security: Defense against the digital dark arts

#PL-1

Coursera is an Equal Opportunity Employer committed to building a welcoming and inclusive workplace. We consider all qualified applicants without regard to legally protected characteristics and provide reasonable accommodations upon request at Learn more in our CCPA Applicant Notice and GDPR Recruitment Notice.