Senior Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Design, establish, and operationalize automated preventive and detective guardrails throughout enterprise cloud environments.

• Develop and uphold enterprise-wide controls that prevent or automatically address high-risk misconfigurations.

• Enhance protection coverage for internet-facing systems by verifying asset inventories and broadening enforcement mechanisms.

• Assess control effectiveness through telemetry, compliance validation, and risk trend analysis.

• Collaborate with cloud platform teams to integrate secure-by-default infrastructure patterns into reusable modules and deployment workflows.

• Advance vulnerability management processes to improve prioritization, remediation speed, and cross-team accountability.

• Automate the intake, enrichment, ticketing, and response workflows for vulnerabilities.

• Develop engineering solutions that enhance detection quality and response speed in collaboration with Cyber Operations.

• Convert security requirements into scalable implementations using infrastructure-as-code and automation frameworks.

• Measure and present workflow efficiency and risk reduction outcomes utilizing operational metrics.

• Implement standardized, automated security checks across prioritized security domains.

• Facilitate security maturity tracking through telemetry-backed reporting and posture metrics.

• Ensure continuity of cloud security monitoring and posture management during tooling transitions or modernization efforts.

• Fortify the reliability, scalability, and resilience of essential security platforms.

• Contribute to documentation, engineering standards, and continuous improvement initiatives.

• Communicate complex security concepts, mentor engineers, and participate in hiring and technical evaluation processes.

⛳️ Requirements

• Over 5 years of experience in security engineering, cloud security, or security architecture.

• Proven experience leading initiatives that scale across multiple teams and environments.

• Background in designing and securing cloud-native architectures, including multi-account AWS environments, microservices, serverless workloads, and API-driven systems.

• Extensive knowledge of AWS security fundamentals, such as IAM strategy, KMS, Secrets Manager, S3, logging/monitoring, Organizations, and SCPs.

• Experience in implementing security controls utilizing Infrastructure as Code, including Terraform, CloudFormation, or CDK.

• Familiarity with policy-as-code methodologies.

• Understanding of secure system design across multi-tier architectures.

• Experience with threat modeling.

• Proficient in securing Linux-based systems and cloud infrastructure.

• Practical knowledge in hardening, logging, identity design, and network segmentation.

• Capability to translate FERPA, PCI DSS, SOC 2, and NIST requirements into technical controls and automated evidence collection.

• Experience in building security automation utilizing scripting and cloud APIs.

• Ability to influence engineering and product stakeholders and foster alignment on secure design choices.

• Strong communication skills for articulating complex security concepts, mentoring engineers, and contributing to hiring and technical evaluations.

• Relevant certifications such as AWS Security Specialty, CISSP, or CCSP are advantageous.

• Willingness to travel 3–5 times a year to College Board offices.

• Authorization to work in the United States for any employer.

• Strong written and verbal communication skills.

• Curiosity and enthusiasm for adopting emerging technologies and AI-driven solutions.

• A learner’s mindset and commitment to personal and professional growth.

• Collaborative and empathetic work approach.

• Passion for impact and excellence.

🏝️ Benefits

• Option for fully remote work.

• Hybrid work model available for candidates near College Board offices (Tuesday and Wednesday in the office).

• Competitive salary package.

• Salaries adjusted based on location.

• Open discussions regarding compensation and benefits.

• Meaningful career opportunities within a supportive team.

• Access to work with emerging technologies and AI-driven solutions.

• Engagement in mission-driven work.

• Opportunities for professional development and learning.