{"id":3390740,"url":"https://alion.io/job/college-board-security-engineer-ii-endpoint-security","title":"Security Engineer II (Endpoint Security)","company":{"id":1753280,"name":"College Board","domain":"collegeboard.org","url":"https://alion.io/company/collegeboard-org","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":116000,"max":125000,"currency":"USD","period":"year","gross":null,"usd_annual":125000},"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Carbon Black","optional":true},{"name":"HIPAA","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"ServiceNow","optional":true},{"name":"Tanium","optional":true}],"status":"live","first_seen_at":"2026-10-27T00:00:00Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-10-30T13:09:48Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"College Board - Technology -Security\nLocation: This is a fully remote role. Candidates who live near CB offices have the option of being fully remote or hybrid (Tuesday and Wednesday in office). All CB employees are required to occasionally travel to meet in person for business purposes.\nType: This is a full-time position\nAbout the Team\nEnterprise Security Engineering (ESE) is the security team responsible for building and operating the foundational security platforms and controls that protect College Board’s enterprise environment. The team owns a broad capability surface spanning security observability, endpoint security, network and edge security, data security, security review management, and AI security.\nESE is both an engineering team and a standards-setting function. The team designs, builds, and operates the controls that protect College Board’s workforce, data, and systems, and it owns the enterprise security standards that operationalize information security policies across the organization.\nThe team partners across security, Technology, and other organizational divisions to deliver integrated, measurable security outcomes. ESE engineers are technical owners who drive measurable risk reduction through automation, disciplined platform operations, and continuous improvement.\nAbout the Opportunity\nAs a Security Engineer II, Endpoint Security, you will own the ongoing engineering of College Board’s application allowlist, ensuring only approved software runs on managed endpoints. You will maintain and extend allowlist coverage as software, vendors, and business needs evolve, define and adjust policy as new device groups come online, and process exception requests as they arise. Application allowlisting is a standing control, not a one-time project - it requires continuous engineering to stay effective as the environment changes, and you will make an immediate impact by keeping enforcement current, accurate, and low-friction for the business.\nThis role partners closely with IT, application owners, and business-unit stakeholders whose software needs must be captured and reflected in the allowlist on an ongoing basis.\nIn this role, you will:\nAllowlist Policy Engineering and Coverage (50%)\nMaintain and extend the application allowlist baseline as software, vendors, and business needs change\nDefine and adjust allowlist enforcement tiers and rollout sequencing as new device groups or business units come online\nTest and validate allowlist policy changes before enforcement to minimize business disruption\nTrack and report on device coverage, blocked installs, and open risks\nException Handling and Policy Maintenance (30%)\nProcess incoming software exception requests, validating business justification against approval criteria\nMaintain the allowlist as new, approved software and vendor updates are identified\nMonitor blocked-install attempts to identify gaps, over-broad restrictions, or emerging needs\nMaintain a knowledge base of allowlist decisions and precedent to support consistent handling of future requests\nTeam Operations and Continuous Improvement (20%)\nParticipate in team routines (planning, standups, retros) and contribute to process improvements\nBuild and maintain documentation, checklists, and runbooks for allowlist policy and exception handling\nConduct periodic audits/spot checks of allowlist adherence and exception documentation\nContinuously build endpoint security expertise through hands-on policy work and cross-team collaboration\nAbout you, you have:\n2 to 4 years of experience in cybersecurity, endpoint security, IT operations, or a related technical role\nWorking knowledge of endpoint management and application control concepts\nHands-on experience processing exceptions or access requests against defined criteria, with attention to detail and comfort working with structured processes (tickets, checklists, exception workflows)\nAbility to communicate clearly with end users and business stakeholders about software approvals and restrictions\nStrong organizational and documentation skills, with the discipline to keep records accurate and audit-ready\nAbility and enthusiasm to learn new security tools and technologies as required\nAuthorization to work in the United States.\nNice to have:\n1+ years of software or scripting experience (Python, PowerShell, or similar) to support automation of allowlist management or reporting\nExperience with endpoint management or application control platforms (e.g., Intune, Tanium, Carbon Black, AppLocker)\nExposure to IT service management/ticketing platforms (e.g., ServiceNow)\nRelevant certifications (Security+, or an endpoint/EDR vendor certification)\nExperience working in a regulated or audited environment (e.g., SOX, HIPAA, PCI)\nAll roles at College Board require:\nA passion for expanding educational and career opportunities and mission-driven work \nAuthorization to work in the United States for any employer \nCuriosity and enthusiasm for emerging technologies, with a willingness to experiment with and adopt new solutions and a comfort learning and applying new digital tools independently and proactively. \nClear and concise communication skills, written and verbal \nA learner's mindset and a commitment to growth: welcoming diverse perspectives, giving and receiving timely, respectful feedback, and continuously improving through iterative learning and user input. \nA drive for impact and excellence: solving complex problems, making data-informed decisions, prioritizing what matters most, and continuously improving through learning, user input, and external benchmarking. \nA collaborative and empathetic approach: working across differences, fostering trust, and contributing to a culture of shared success. \nAbout Our Process\nApplication review will begin immediately and will continue until the position is filled. This role is expected to accept applications for a minimum of 5 business days.\nWhile the hiring process may vary, it generally includes: resume and application submission, recruiter phone/video screen, hiring manager interview, a practical exercise, a panel interview, a conversation with leadership and reference checks. \nWhat We Offer\nAt College Board, we offer more than just a paycheck-we provide a meaningful career, a supportive team, and a comprehensive package designed to help you thrive. We’re a self-sustaining nonprofit that believes in fair and competitive compensation, grounded in your qualifications, experience, impact, and the market.\nA Thoughtful Approach to Compensation\nThe hiring range for this role is $116,000 - $125,000\nYour exact salary will depend on your location, experience, and how your background compares to others in similar roles at the College Board. \nWe aim to make our best offer upfront-rooted in fairness, transparency, and market data. \nWe adjust salaries by location to ensure fairness, no matter where you live. \nYou’ll have open, transparent conversations about compensation, benefits, and what it’s like to work at College Board throughout your hiring process. Check out our careers page for more.\n#LI-DC1\n#LI-REMOTE","description_format":"text","description_chars":7110,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Endpoint Security","Vulnerability Management","Skill Assessment","Nonprofits & Foundations"],"lifecycle":[{"event":"open","at":"2026-10-28T09:52:49Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 4 · green card filings: 3","filings_12m":4,"filings_prev_12m":7,"green_card_filings_12m":3,"median_offered_wage_usd":161071,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":1}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":3,"expected_fill_days":44,"reasons":["conf:9","velocity","win:early"],"computed_at":"2026-10-30T05:48:23Z"},"pay":{"stated_usd_annual":125000,"is_top_pay":false},"html_url":"https://alion.io/job/college-board-security-engineer-ii-endpoint-security","json_url":"https://alion.io/job/college-board-security-engineer-ii-endpoint-security.json","meta":{"generated_at":"2026-10-30T21:12:42Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11508,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1753280},"rest":"https://alion.io/mcp/rest/get_company?id=1753280"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcollege-board-security-engineer-ii-endpoint-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcollege-board-security-engineer-ii-endpoint-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcollege-board-security-engineer-ii-endpoint-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/college-board-security-engineer-ii-endpoint-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcollege-board-security-engineer-ii-endpoint-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3390740}},{"tool":"search_jobs","arguments":{"company":"collegeboard.org","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3390740},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}