Design, implement, and operationalize automated preventive and detective guardrails across enterprise cloud environments.

Build and enforce enterprise-wide controls that prevent or automatically remediate high-risk misconfigurations.

Improve protection coverage for internet-facing systems by validating asset inventories and expanding enforcement mechanisms.

Continuously evaluate control effectiveness through telemetry, compliance validation, and risk trend analysis.

Partner with cloud platform teams to embed secure-by-default infrastructure patterns into reusable modules and deployment workflows.

Enhance vulnerability management processes to improve prioritization, remediation velocity, and cross-team accountability.

Increase automation across vulnerability intake, enrichment, ticketing, and response workflows to reduce manual triage burden.

Design and deliver engineering solutions that improve detection quality and response speed in collaboration with Cyber Operations.

Translate security requirements into scalable technical implementations using infrastructure-as-code and automation frameworks.

Measure and report on workflow efficiency and risk reduction outcomes using operational metrics.

Implement standardized, automated security checks across prioritized security domains to strengthen baseline posture.

Enable measurable security maturity tracking through telemetry-backed reporting and posture metrics.

Support continuity of cloud security monitoring and posture management during tooling transitions or modernization efforts.

Strengthen reliability, scalability, and resilience of critical security platforms to reduce operational risk.

Contribute to documentation, engineering standards, and continuous improvement practices that promote long-term maintainability.

5+ years of experience in security engineering, cloud security, or security architecture, with demonstrated ownership of initiatives that scale across multiple teams and environments.

Designed and secured cloud-native architectures, including multi-account AWS environments, microservices, serverless workloads, and API-driven systems.

Have deep experience with AWS security fundamentals, including IAM strategy (least privilege, cross-account access, federation), KMS, Secrets Manager, S3, logging/monitoring, and preventive guardrails using Organizations and SCPs.

Implemented security controls using Infrastructure as Code (Terraform, CloudFormation, CDK) and support policy-as-code approaches to enforce standards at scale.

Understand secure system design across multi-tier architectures and can perform threat modeling to identify systemic risks before they reach production.

Experienced in securing Linux-based systems and cloud infrastructure, with practical expertise in hardening, logging, identity design, and network segmentation.

Translate regulatory and compliance requirements (e.g., FERPA, PCI DSS, SOC 2, NIST) into practical technical controls and automated evidence collection.

Build automation to reduce manual security work, leveraging scripting and cloud APIs to create repeatable, measurable security improvements.

Comfortable operating in fast-moving environments where standards and tooling evolve, and you proactively define guardrails rather than waiting for direction.

Influence engineering and product stakeholders by balancing delivery velocity with risk reduction, presenting trade-offs clearly and driving alignment on secure design decisions.

Communicate complex security concepts in practical terms, mentor engineers, and contribute to hiring and technical evaluation processes.

Relevant certifications (e.g., AWS Security Specialty, CISSP, CCSP) are a plus, but hands-on engineering experience and demonstrable impact matter most.

Ability to travel 3–5 times per year to College Board offices.

Authorization to work in the United States.

A passion for expanding educational and career opportunities and mission-driven work

Authorization to work in the United States for any employer

Curiosity and enthusiasm for emerging technologies, with a willingness to experiment with and adopt new AI-driven solutions and a comfort learning and applying new digital tools independently and proactively.

Clear and concise communication skills, written and verbal

A learner's mindset and a commitment to growth: welcoming diverse perspectives, giving and receiving timely, respectful feedback, and continuously improving through iterative learning and user input.

A drive for impact and excellence: solving complex problems, making data-informed decisions, prioritizing what matters most, and continuously improving through learning, user input, and external benchmarking.

A collaborative and empathetic approach: working across differences, fostering trust, and contributing to a culture of shared success.

Application review will begin immediately and will continue until the position is filled. This role is expected to accept applications for a minimum of 5 business days. Please keep in mind that College Board offices will be closed November 27th – November 28th and December 25th – January 2nd so it is better to apply sooner than later.

While the hiring process may vary, it generally includes: resume and application submission, recruiter phone/video screen, hiring manager interview, performance exercise such as live coding, a panel interview, a conversation with leadership and reference checks.

The hiring range for this role is $153,000 - $166,000

Your exact salary will depend on your location, experience, and how your background compares to others in similar roles at the College Board.

We aim to make our best offer upfront—rooted in fairness, transparency, and market data.

We adjust salaries by location to ensure fairness, no matter where you live.

Design, implement, and operationalize automated preventive and detective guardrails across enterprise cloud environments.

Build and enforce enterprise-wide controls that prevent or automatically remediate high-risk misconfigurations.

Improve protection coverage for internet-facing systems by validating asset inventories and expanding enforcement mechanisms.

Continuously evaluate control effectiveness through telemetry, compliance validation, and risk trend analysis.

Partner with cloud platform teams to embed secure-by-default infrastructure patterns into reusable modules and deployment workflows.

Enhance vulnerability management processes to improve prioritization, remediation velocity, and cross-team accountability.

Increase automation across vulnerability intake, enrichment, ticketing, and response workflows to reduce manual triage burden.

Design and deliver engineering solutions that improve detection quality and response speed in collaboration with Cyber Operations.

Translate security requirements into scalable technical implementations using infrastructure-as-code and automation frameworks.

Measure and report on workflow efficiency and risk reduction outcomes using operational metrics.

Implement standardized, automated security checks across prioritized security domains to strengthen baseline posture.

Enable measurable security maturity tracking through telemetry-backed reporting and posture metrics.

Support continuity of cloud security monitoring and posture management during tooling transitions or modernization efforts.

Strengthen reliability, scalability, and resilience of critical security platforms to reduce operational risk.

Contribute to documentation, engineering standards, and continuous improvement practices that promote long-term maintainability.

5+ years of experience in security engineering, cloud security, or security architecture, with demonstrated ownership of initiatives that scale across multiple teams and environments.

Designed and secured cloud-native architectures, including multi-account AWS environments, microservices, serverless workloads, and API-driven systems.

Have deep experience with AWS security fundamentals, including IAM strategy (least privilege, cross-account access, federation), KMS, Secrets Manager, S3, logging/monitoring, and preventive guardrails using Organizations and SCPs.

Implemented security controls using Infrastructure as Code (Terraform, CloudFormation, CDK) and support policy-as-code approaches to enforce standards at scale.

Understand secure system design across multi-tier architectures and can perform threat modeling to identify systemic risks before they reach production.

Experienced in securing Linux-based systems and cloud infrastructure, with practical expertise in hardening, logging, identity design, and network segmentation.

Translate regulatory and compliance requirements (e.g., FERPA, PCI DSS, SOC 2, NIST) into practical technical controls and automated evidence collection.

Build automation to reduce manual security work, leveraging scripting and cloud APIs to create repeatable, measurable security improvements.

Comfortable operating in fast-moving environments where standards and tooling evolve, and you proactively define guardrails rather than waiting for direction.

Influence engineering and product stakeholders by balancing delivery velocity with risk reduction, presenting trade-offs clearly and driving alignment on secure design decisions.

Communicate complex security concepts in practical terms, mentor engineers, and contribute to hiring and technical evaluation processes.

Relevant certifications (e.g., AWS Security Specialty, CISSP, CCSP) are a plus, but hands-on engineering experience and demonstrable impact matter most.

Ability to travel 3–5 times per year to College Board offices.

Authorization to work in the United States.

A passion for expanding educational and career opportunities and mission-driven work

Authorization to work in the United States for any employer

Curiosity and enthusiasm for emerging technologies, with a willingness to experiment with and adopt new AI-driven solutions and a comfort learning and applying new digital tools independently and proactively.

Clear and concise communication skills, written and verbal

A learner's mindset and a commitment to growth: welcoming diverse perspectives, giving and receiving timely, respectful feedback, and continuously improving through iterative learning and user input.

A drive for impact and excellence: solving complex problems, making data-informed decisions, prioritizing what matters most, and continuously improving through learning, user input, and external benchmarking.

A collaborative and empathetic approach: working across differences, fostering trust, and contributing to a culture of shared success.

Application review will begin immediately and will continue until the position is filled. This role is expected to accept applications for a minimum of 5 business days. Please keep in mind that College Board offices will be closed November 27th – November 28th and December 25th – January 2nd so it is better to apply sooner than later.

While the hiring process may vary, it generally includes: resume and application submission, recruiter phone/video screen, hiring manager interview, performance exercise such as live coding, a panel interview, a conversation with leadership and reference checks.

The hiring range for this role is $153,000 - $166,000

Your exact salary will depend on your location, experience, and how your background compares to others in similar roles at the College Board.

We aim to make our best offer upfront—rooted in fairness, transparency, and market data.

We adjust salaries by location to ensure fairness, no matter where you live.