Security Engineer

ITHAKA’s mission is to expand access to knowledge and education around the world. Our services — JSTOR, Portico, and Ithaka S+R — enable people everywhere to learn, to grow, and to overcome barriers to education. In carrying out our mission, as employees we feel a deep responsibility to members of our community and to each other, and we are committed to building and sustaining a culture where everyone can thrive.

ITHAKA is seeking a Platform Security Engineer to help mature our DevOps capabilities into DevSecOps by embedding security into software delivery, infrastructure, and developer workflows.
This role focuses on building practical engineering capabilities that help teams identify, prioritize, and remediate security risks more quickly and consistently. Rather than relying on one-off manual efforts, the Platform Security Engineer will improve automation, integrate security tooling into existing workflows, and help make secure practices the default way of working. In this role, you will partner with engineers, architects, and platform stakeholders across ITHAKA to reduce security risk through automation, standardization, and developer enablement.
The role works in close partnership with the Chief Architect through a dotted-line relationship that provides technical direction, architectural guidance, and alignment on enterprise security strategy.
Build and improve engineering workflows and tooling for vulnerability management across applications, dependencies, containers, and infrastructure.
Advocate for integration of security checks and policy controls into software delivery pipelines and day-to-day developer workflows.
Improve dependency management and package governance so teams can address software exposure consistently and sustainably.
Help evaluate, implement, and tune security tooling includingSAST, DAST, SCA, secret scanning, and related platform controls.
Work with engineers and technical leaders to triage findings, prioritize risks, and translate them into practical remediation plans.
Contribute to secure software development lifecycle practices, documentation, and internal guidance that align with how ITHAKA teams build and operate systems.
3-5 years of experience in security engineering, platform engineering, DevSecOps, or a closely related technical role.
~ Hands-on experience implementing security tooling and controls in modern software delivery environments.
~ Experience with vulnerability management, dependency management, package governance, or software supply chain security.
~ Familiarity with CI/CD, source control workflows, infrastructure automation, and cloud-based application environments.
~ Strong judgment about balancing risk reduction, developer experience, and delivery needs.
~ Experience with AWS infrastructure and services, and common engineering tooling used in modern product organizations is helpful.
~ Experience using AI-enabled tooling in this area is beneficial but not required.

ITHAKA is not currently considering candidates who require any type of immigration sponsorship (additional work authorization or permanent work authorization) to work in the United States.
At present, our total compensation package for benefits-eligible employees includes medical, dental, and vision plans, an employer-paid 10% retirement contribution, paid parental and caregiver leave, 22 days of paid time off, 11 paid holidays, up to 12 paid sick days, wellness benefits, and more. People from a wide range of backgrounds work at ITHAKA, and we believe that unique perspectives help us realize new insights and build better solutions.
We enthusiastically welcome applications from people of all backgrounds and credentials. Candidates may apply by submitting an application online through our career site, if you have any questions about your application, please contact us at is committed to providing reasonable accommodations, if there’s anything we can do to accommodate any portion of the application or hiring process, please contact us at