Senior Security Engineer
College Board2 days ago
Remote, United StatesSenior
Base Salary
$153k - $166k/yr
Responsibilities
- Design, implement, and operationalize automated preventive and detective cloud security guardrails.
- Build enterprise-wide controls that prevent or automatically remediate high-risk misconfigurations and improve protection for internet-facing systems.
- Embed secure-by-default infrastructure patterns into reusable modules and deployment workflows.
- Enhance vulnerability-management intake, prioritization, enrichment, ticketing, remediation, and response automation.
- Deliver engineering solutions that improve detection quality, response speed, and security workflow efficiency.
- Implement standardized security checks, telemetry-backed posture reporting, and measurable security maturity metrics.
- Support continuity, reliability, scalability, and resilience of cloud security monitoring and posture-management platforms.
- Document engineering standards, contribute to continuous improvement, mentor engineers, and participate in hiring and technical evaluations.
Requirements
- 5+ years of experience in security engineering, cloud security, or security architecture, including ownership of initiatives spanning multiple teams and environments.
- Experience designing and securing multi-account AWS environments, cloud-native architectures, microservices, serverless workloads, and API-driven systems.
- Deep knowledge of AWS security fundamentals, including IAM strategy, KMS, Secrets Manager, S3, logging and monitoring, Organizations, and SCPs.
- Experience implementing security controls with Terraform, CloudFormation, and CDK, including policy-as-code approaches.
- Understanding of secure multi-tier system design and threat modeling for identifying systemic risks before production.
- Practical experience securing Linux-based systems and cloud infrastructure through hardening, logging, identity design, and network segmentation.
- Ability to translate FERPA, PCI DSS, SOC 2, and NIST requirements into technical controls and automated evidence collection.
- Experience building scripting and cloud-API automation that reduces manual security work and produces measurable improvements.
- Ability to influence engineering and product stakeholders, communicate security trade-offs, mentor engineers, and drive alignment on secure design decisions.
- Relevant certifications such as AWS Security Specialty, CISSP, or CCSP are preferred but not required.
- Authorization to work in the United States for any employer.
- Ability to travel to College Board offices 3–5 times per year.
Benefits
- Full-time, fully remote work; candidates near College Board offices may choose fully remote or hybrid work with Tuesdays and Wednesdays in the office.
- Comprehensive benefits and a supportive, mission-driven nonprofit work environment.
- The role includes travel to College Board offices 3–5 times per year.
About College Board
College Board is a nonprofit education organization that builds and administers programs such as the SAT, PSAT/NMSQT, Advanced Placement, CLEP, and BigFuture planning tools for students, schools, and colleges. It generates revenue primarily through exam and program fees and services to educational institutions. Founded in 1900 and headquartered in New York, it works with U.S. secondary schools and higher-ed admissions to deliver assessments and course frameworks.