Engineer IV, Product Security
Remote - New York
Engineer IV, Product Security
College Board - Technology
Remote
About the Team
The College Board’s Product Security team is an agile organization, embracing DevSecOps and cloud-native systems, and focused on improving speed and security of service delivery in support of an important mission. To enable this mission, the College Board is seeking an Engineer IV - Product Security to help drive the development of innovative and transformative security solutions in our DevSecOps and cloud transformation initiatives. The Engineer IV - Product Security is a highly technical and creative contributor to a bleeding edge cloud and application security team enabling the agile development of secure and reliable cloud-based solutions via strong partnerships and interactions with our Products Teams.
About the Opportunity
As a Product Security Engineer, you will support and manage a variety of projects in the Product Security team. In this role, you will both learn and introduce new security services, technologies, and technical solutions to secure our Products and platforms.
You will interact with different stake holders, product development leads, architects, Cybersecurity operations, Risk and Compliance teams and external partners/vendors such as ETS and various SaaS providers. You will review and adopt new innovative security solutions, make updates to existing solutions, negotiate alternative options and participate in building technical and release roadmaps.
As an Engineer IV, you will lead and mentor junior team members supporting their growth and development in Product Security concepts, tools and best practices.
In this role you will:
- Partner Program - Partnership Development (50%)
- Act as a liaison between Product Security teams (both in IT and outside of IT) and the Information Security Office via regular engagements with assigned Partner teams. Embed into planning and grooming sessions.
- Develop deep understanding of our Security Policies and Audit requirements in order to support assigned Partner teams, GRC Exceptions and Audit efforts (PCI, SOC2, ISO27001, GDPR, State Contract requirements)
- Create Risk Registers for your assigned products and communicate application risks and vulnerabilities to technical stakeholders.
- Lead application vulnerability reviews and remediation efforts. Develop deep skill sets in understanding, managing and determining exploitability of vulnerabilities to properly determine risk and priority.
- Work to gain a deep understanding of your assigned products’ architectures, Supply Chain (Vendors, Partners, Third Party) Development Practices, CI/CD, GRC Exceptions, Release cadence in order to understand and support mitigation of security risks.
- Partner with Senior Team members to mentor developers through discussions, presentations, or hands on …
This job isn't fresh anymore!
Search Fresh JobsJob Profile
Competitive benefits and compensation Mentorship Paid parental leave Paid Time Off Professional development opportunities Remote work Retirement benefits Tuition Assistance Vision Insurance
Tasks- Conduct training sessions
- Manage risk assessments
- Mentor junior team members
Agile Application Security AWS AWS services CI/CD Cloud Cloud Native Systems Compliance Cybersecurity DevSecOps Education GDPR GRC Incident Response Information security ISO27001 Javascript Leadership Management Node.js Operations PCI Product Development React Risk Management Secure coding Secure development practices Security Security policies Security standards SOC2 SQL Technology Training Vulnerability assessment
Experience5 years
Education Certifications TimezonesAmerica/Anchorage America/Chicago America/Denver America/Los_Angeles America/New_York Pacific/Honolulu UTC-10 UTC-5 UTC-6 UTC-7 UTC-8 UTC-9