Senior Engineer - Product Security

Senior Engineer – Product Security 

College Board - Technology  

Location:  This is a fully remote role. Candidates who live near CB offices have the option of being fully remote or hybrid (Tuesday and Wednesday in office). 

Type: This is a full-time position 

About the Team  

The College Board Product Security team is a close knit and enthusiastic group of 8 technologists with a thirst for knowledge in all things security and cloud. We collaborate closely daily to investigate and solve problems and have strong alignment with our product teams to be a step ahead in securing the organization’s suite of products. We are an agile organization, embracing DevSecOps and cloud-native systems, and are focused on improving speed and security of service delivery in support of our important mission. Our team comes from a wide variety of backgrounds as well as experience within the security space and we work to ensure everyone on the team has a voice.  

Product Security Engineers work closely with Information Security, Governance and Compliance and Product teams to achieve product and security business objectives. They support the implementation of secure development practices, threat modelling, architecture, design, vulnerability assessments and security verification, as well as defining the security standards and managing operations for a variety of products and security tools. 

About the Opportunity   

As Senior Engineer - Product Security, you will frequently interact with a variety of technology and business stakeholders to provide hands on risk remediation or recommendation solutions, including secure patterns and mitigation strategies. You will develop a deep understanding of our product landscape and lead the design and implementation of innovative security solutions. This includes enhancing existing systems, proposing new approaches, evaluating alternatives, and driving alignment across technical and release roadmaps.   

As a Senior Engineer, you will lead and mentor junior team members supporting their growth and development in Product Security concepts, tools and best practices.  

In this role, you will: 

Partner with Programs - Partnership Development (50%) 

• Act as a liaison between product development teams (both within and outside of technology) and other information security teams via regular engagements with assigned partner teams.  

• Embed into product team’s planning and grooming sessions.  

• Develop deep understanding of CB’s security policies and guidelines, audit requirements (SOC2, ISO27002, PCI, PII) and GRC exceptions to support compliance and security work 

• Create threat models and risk registers for your assigned products and communicate application risks and vulnerabilities to technical & n