Senior Engineer, AI Product Security

This is a fully remote position, open to applicants in New York, +1 more state.

📋 Description

• Collaborate with designated product and engineering teams as their security advisor.

• Engage in planning, grooming, and design sessions to provide guidance on security architecture and identify potential risks.

• Take ownership of threat models, risk assessments, security engagement lifecycles, and mitigation strategies.

• Lead vulnerability assessments and remediation efforts, evaluating exploitability for risk prioritization.

• Implement AI security practices, adhere to College Board security policies, and meet compliance requirements to support product teams.

• Create and review security design documentation and code.

• Ensure products comply with Product Security Framework standards and address any identified gaps.

• Mentor product teams and junior engineers through discussions, code reviews, and training sessions.

• Enhance the AI Product Security program by developing AI security controls and guidance.

• Document and disseminate emerging security patterns and industry developments.

• Deploy and manage security tools across cloud environments.

• Integrate automated security measures into CI/CD pipelines.

• Contribute to roadmap planning and strategic initiatives.

• Define and monitor product security KPIs and report on progress.

• Participate in agile ceremonies, manage epics, and evaluate roadmap timelines and risks.

• Collaborate with the Information Security team on incident response and operational projects.

⛳️ Requirements

• 5–8 years of experience in product security, including full ownership of the security engagement lifecycle.

• Expertise in application security, including secure SDLC, CI/CD pipeline security, cloud environments, and frameworks such as OWASP and CIS.

• Strong understanding of emerging security trends in AI and agentic AI.

• Familiarity with SOC 2, ISO 27002, PCI, and PII compliance requirements.

• Proficient in reviewing and enhancing application architecture for security, testability, and maintainability.

• Hands-on experience with JavaScript/TypeScript or Python.

• AWS experience preferred or advantageous.

• Ability to build collaborative relationships with product owners and engineering teams.

• Experience influencing backlog prioritization and roadmap decisions from a security viewpoint.

• Expertise in multiple technical domains.

• Willingness to travel 3–5 times a year to College Board offices located in New York or Reston, VA.

• Authorization to work in the United States for any employer.

• Curiosity and enthusiasm for emerging technologies, with a readiness to embrace AI-driven solutions.

• Excellent written and verbal communication skills.

• A learner’s mindset with a commitment to personal and professional growth.

• A collaborative and empathetic approach.

• A strong drive for impact and excellence.

🏝️ Benefits

• Meaningful career opportunities within a supportive team environment.

• Comprehensive compensation and benefits package.

• Location-adjusted compensation for equity.

• Open discussions about compensation and benefits throughout the hiring process.

• Option for fully remote work.

• Hybrid work option available for candidates residing near College Board offices.

• Opportunity to engage in mission-driven nonprofit work.