{"id":1730080,"url":"https://alion.io/job/college-board-product-security-engineer-iv","title":"Product Security Engineer IV","company":{"id":1753280,"name":"College Board","domain":"collegeboard.org","url":"https://alion.io/company/collegeboard-org","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":140000,"max":151000,"currency":"USD","period":"year","gross":null,"usd_annual":151000},"salary_estimate":null,"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"JavaScript","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"Threat Modeling","optional":false},{"name":"TypeScript","optional":false}],"status":"live","first_seen_at":"2026-10-02T23:47:43Z","employer_posted_date":"2026-10-02","last_verified_at":"2026-10-23T07:24:20Z","board_verified":false,"closed_at":null,"days_open":22,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":22},"description":"Product Security Engineer IV\nCollege Board - Technology -Product Security\nLocation: 1) This is a fully remote role. Candidates who live near CB offices have the option of being fully remote or hybrid (Tuesday and Wednesday in office).\nType: This is a full-time position\nAbout the Team\nThe College Board Product Security team is a close-knit and enthusiastic group of technologists with a thirst for knowledge in security and cloud. We collaborate closely to investigate and solve problems and have strong alignment with our product teams to be a step ahead in securing the organization’s suite of products. We are an agile organization, embracing AI and cloud-native systems, and are focused on improving speed and security of service delivery in support of our important mission. Our team comes from a wide variety of backgrounds as well as experience within the security space and we work to ensure everyone on the team has a voice.\nProduct Security Engineers work closely with Product teams as well as other organizational stakeholder groups to achieve product and security business objectives. They support threat modelling, architecture design, and implementation of secure development practices. In addition, they help define organizational security standards and organizational capability and tooling adoption decisions.\nAbout the Opportunity\nAs a Product Security Engineer IV, you will work alongside other security engineers to support security across the development lifecycle for assigned College Board product teams. You will participate in threat modeling, vulnerability assessment, and design review-including for products that incorporate AI-powered features and use AI coding tools in development. You will build and apply your security knowledge on real work and document your findings clearly.\nDay-to-day, you will conduct security code reviews, operate assigned security tooling, and support the remediation of identified vulnerabilities. You will also contribute to the Product Security Partners program, helping product engineers understand and apply secure development practices.\nThis is hands-on product security work with real stakes-your contributions help protect platforms that serve millions of students and educators worldwide.\nIn this role, you will:\nSupport Product Team Partnerships (55%)\nParticipate in planning, grooming, and design sessions for assigned product teams; contribute to security discussions. \nContribute to threat models and risk registers for assigned products; document findings clearly and escalate issues to leadership as needed. \nConduct vulnerability assessments on assigned products; apply exploitability frameworks to support accurate risk prioritization. \nApply CB's security policies, audit requirements (SOC 2, ISO 27002, PCI, PII), and GRC standards-with guidance-to support compliance activities. \nReview code and security design documentation; identify security issues and contribute feedback in design reviews. \nSupport remediation of security gaps in assigned products; track and report progress against Product Security Framework requirements. \nSupport the Product Security Program (20%)\nParticipate in security training sessions; help product engineers apply secure coding practices, including responsible use of AI coding tools. \nSupport the Product Security Partners program by contributing to security champion activities in assigned product teams. \nDocument security learnings and patterns; contribute to the team's shared knowledge base. \nInvest in developing your security expertise: learn from industry advancement, attend team learning events, apply new skills in your daily work, and contribute to Hackathons. \nContribute to Operational Improvement (25%)\nOperate and monitor assigned security tooling across cloud environments; support the integration of security controls into CI/CD pipelines. \nContribute to security metrics tracking and reporting; collect and organize data that measures partner team security posture. \nParticipate in agile ceremonies; manage assigned stories and tasks with clear documentation and timely delivery. \nServe as on-call first responder for security tooling your team owns; support the Information Security team on incident response. \nAbout you, you have\n4+ years of experience in product security, application security, cloud security, or software engineering with security responsibilities. \nDeep application security knowledge, including common vulnerability classes (OWASP Top 10), secure coding practices, and security testing. \nSolid experience with securing AWS Services, AWS Secure Architectures, Application Security and Cloud Applications, including Software Supply Chain and micro service architecture \nFamiliarity with cloud environments (AWS preferred) and CI/CD pipelines; developing knowledge of how security controls integrate into software delivery. \nFamiliarity with audit and compliance frameworks such as SOC 2, ISO 27002, PCI, and PII, and the ability to apply them with guidance to product teams. \nExperience reading and reviewing code; proficiency or active development of skills in JavaScript/TypeScript or Python is a plus. \nClear, concise written and verbal communication; the ability to document findings and explain security concepts to technical peers. \nA growth mindset: you seek feedback, apply it, and invest actively in developing your security expertise. \nAbility to travel 2-3 times per year to College Board offices in New York or Reston, VA. \nAll roles at College Board require:\nA passion for expanding educational and career opportunities and mission-driven work \nCuriosity and enthusiasm for emerging technologies, with a willingness to experiment with and adopt new AI-driven solutions and comfort with learning and applying new digital tools independently and proactively. \nClear and concise communication skills, written and verbal \nA learner's mindset and a commitment to growth: welcoming diverse perspectives, giving and receiving timely, respectful feedback, and continuously improving through iterative learning and user input. \nA drive for impact and excellence: solving complex problems, making data-informed decisions, prioritizing what matters most, and continuously improving through learning, user input, and external benchmarking. \nA collaborative and empathetic approach: working across differences, fostering trust, and contributing to a culture of shared success \nAuthorization to work in the United States \nAbout Our Process\nApplication review will begin immediately and will continue until the position is filled. This role is expected to accept applications for a minimum of 5 business days. \nWhile the hiring process may vary, it generally includes: resume and application submission, recruiter phone/video screen, hiring manager interview, performance exercise such as live coding, a panel interview, a conversation with leadership and reference checks. \nWhat We Offer\nAt College Board, we offer more than a paycheck: we provide a meaningful career, a supportive team, and a comprehensive package designed to help you thrive. We’re a self-sustaining nonprofit that believes in fair and competitive compensation grounded in your qualifications, experience, impact, and the market.\nA Thoughtful Approach to Compensation\nThe hiring range for this role is $140,000 to $151,000. \nYour exact salary will depend on your location, experience, and how your background compares to others in similar roles at the College Board. \nWe aim to make our best offer upfront, rooted in fairness, transparency, and market data. \nWe adjust salaries by location to ensure fairness, no matter where you live. \nYou’ll have open, transparent conversations about compensation, benefits, and what it’s like to work at College Board throughout your hiring process. Check out our careers page for more.","description_format":"text","description_chars":7843,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Skill Assessment","Nonprofits & Foundations"],"lifecycle":[{"event":"open","at":"2026-10-02T23:47:43Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 4 · green card filings: 3","filings_12m":4,"filings_prev_12m":7,"green_card_filings_12m":3,"median_offered_wage_usd":161071,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":1}],"liveness":{"score":74,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.821,"p_room":0.9,"age_days":22,"expected_fill_days":46,"reasons":["conf:46","velocity","win:mid"],"computed_at":"2026-10-25T05:49:26Z"},"pay":{"stated_usd_annual":151000,"is_top_pay":false},"html_url":"https://alion.io/job/college-board-product-security-engineer-iv","json_url":"https://alion.io/job/college-board-product-security-engineer-iv.json","meta":{"generated_at":"2026-10-25T12:23:30Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17880,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1753280},"rest":"https://alion.io/mcp/rest/get_company?id=1753280"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcollege-board-product-security-engineer-iv"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcollege-board-product-security-engineer-iv"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcollege-board-product-security-engineer-iv"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/college-board-product-security-engineer-iv\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcollege-board-product-security-engineer-iv"}]}