Skip to content

Open nowPosted 18 days ago

Senior Engineer, AI Product Security

The College Board48 open roles

Pay
$153,000 – $166,000 a year
Where
Remote - USA
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Engineer, AI Product SecurityThe College Board · Remote - USA
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on The College Board's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. The College Board postings stay open a median of 38 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 58.1%60 days
This job: posted 18 days ago

The College Board median: 38 days open

The posting

College Board – Technology – Infrastructure & InfoSec

Location: This is a fully remote role. Candidates who live near CB offices have the option of being fully remote or hybrid (Tuesday and Wednesday in office).

Type: This is a full-time position

About the Team

The College Board Product Security team is a close-knit and enthusiastic group of technologists with a thirst for knowledge in security and cloud. We collaborate closely to investigate and solve problems and have strong alignment with our product teams to be a step ahead in securing the organization’s suite of products. We are an agile organization, embracing AI and cloud-native systems, and are focused on improving speed and security of service delivery in support of our important mission. Our team comes from a wide variety of backgrounds as well as experience within the security space and we work to ensure everyone on the team has a voice.

Product Security Engineers work closely with product and engineering teams as well as other organizational stakeholder groups to achieve product and security business objectives. They support threat modelling, architecture design, and implementation of secure development practices. In addition, they help define organizational security standards and organizational capability and tooling adoption decisions.

About the Opportunity

As a Senior Product Security Engineer, you will embed with assigned product and engineering teams to own security across the full development lifecycle, from feature-level design review and threat modeling through vulnerability remediation and production monitoring. This includes a heavy focus on securing AI features built into College Board's products, implementing AI-native security tooling and features, and assessing and mitigating the risks that AI development tools introduce into the software supply chain. You will join planning and grooming sessions as the team's security partner, translating compliance and requirements and security risks into guidance engineers can act on.

You will lead risk assessments, provide prioritization advice, and drive mitigation of risks. Alongside that product or engineering team work, you will coach developers on security practices, including the responsible use of AI coding tools.

This role is equal parts hands-on security engineering and organizational enablement. Your work will directly protect platforms that serve millions of students and educators worldwide.

In this role, you will:

Partner with Product and Engineering Teams (50%)

  • Serve as the security partner for assigned product and engineering teams; join planning, grooming, and design sessions to advise on security architecture and flag risk early.
  • Own threat models and risk assessments for assigned products; communicate security risks and mitigation plans to technical and nontechnical stakeholders.
  • Own the security engagement lifecycle for each assigned product, from design review and documentation through production deployment and monitoring.
  • Lead vulnerability reviews and remediation; assess exploitability to set accurate risk priority.
  • Apply knowledge of emerging best practices in AI security, CB's security policies, and compliance requirements (SOC 2, ISO 27002, PCI, PII) to guide product teams.
  • Write and review security design documentation and code; give and receive direct feedback in design reviews.
  • Ensure assigned products meet Product Security Framework requirements; identify gaps and drive remediation.

Elevate Product Security (25%)

  • Coach product teams and junior engineers through discussions, code reviews, and hands-on training to advance secure SDLC practices.
  • Grow and mature the AI Product Security program; develop security controls and guidance in the use of AI in software engineering, in our products, and in our security program.
  • Document and share emerging security patterns; keep your knowledge accessible to the full team.
  • Stay current with industry trends; apply what you learn to improve the partner program.

Drive Operational Improvement (25%)

  • Deploy and operate security tooling across cloud environments; integrate automated security controls into CI/CD pipelines.
  • Contribute to roadmap planning and strategic direction: identify security risks and opportunities, escalate issues with cross-team scope, and synthesize feedback to inform priorities.
  • Define and track KPIs that measure product security maturity and partner team posture; use the data to prioritize work and report progress.
  • Participate in agile ceremonies; manage assigned epics and assess roadmap timelines and risk.
  • Work with the Information Security team on incident response and operational initiatives.

About you, you have:

  • 5–8 years of product security experience, including ownership of the full security engagement lifecycle—from threat modeling and architecture review through vulnerability remediation and production monitoring.
  • Application security expertise across secure SDLC, CI/CD pipeline security, cloud environments (AWS preferred), and common frameworks including OWASP and CIS.
  • Strong knowledge of emerging security trends in AI and agentic AI in software engineering and software products; the ability to identify industry patterns in AI risks and apply them to your day-to-day work.
  • Knowledge of audit and compliance requirements (SOC 2, ISO 27002, PCI, PII), especially as they relate to the use of AI, and skill at translating them into clear guidance for engineering teams.
  • Proficiency reviewing and improving application architecture for security, testability, and maintainability; hands-on experience with JavaScript/TypeScript or Python, and AWS is a plus.
  • The ability to establish strong working relationships with product owners and engineering teams; experience shaping backlog prioritization and roadmap decisions from a security perspective.
  • An emerging security strategy instinct: you identify risks and opportunities across team boundaries, start shaping security direction, and communicate implications clearly.
  • Expertise in more than one technical domain and a commitment to keeping knowledge documented and shared, so the team never relies on one person.
  • Evidence-based judgment in candidate evaluation; consistent standards across resumes and interviews.
  • Ability to travel 3–5 times per year to College Board offices in New York or Reston, VA.

All roles at College Board require:

  • A passion for expanding educational and career opportunities and mission-driven work
  • Authorization to work in the United States for any employer
  • Curiosity and enthusiasm for emerging technologies, with a willingness to experiment with and adopt new AI-driven solutions and comfort learning and applying new digital tools independently and proactively.
  • Clear and concise communication skills, written and verbal
  • A learner's mindset and a commitment to growth: welcoming diverse perspectives, giving and receiving timely, respectful feedback, and continuously improving through iterative learning and user input.
  • A drive for impact and excellence: solving complex problems, making data-informed decisions, prioritizing what matters most, and continuously improving through learning, user input, and external benchmarking.
  • A collaborative and empathetic approach: working across differences, fostering trust, and contributing to a culture of shared success.

About Our Process

  • Application review will begin immediately and will continue until the position is filled. This role is expected to accept applications for a minimum of 5 business days.
  • While the hiring process may vary, it generally includes: resume and application submission, recruiter phone/video screen, hiring manager interview, performance exercise, a panel interview, a conversation with leadership and reference checks.

What We Offer

At College Board, we offer more than just a paycheck, we provide a meaningful career, a supportive team, and a comprehensive package designed to help you thrive. We’re a self-sustaining nonprofit that believes in fair and competitive compensation, grounded in your qualifications, experience, impact, and the market.

A Thoughtful Approach to Compensation

  • The hiring range for this role is $153,000 - $166,000
  • Your exact salary will depend on your location, experience, and how your background compares to others in similar roles at the College Board.
  • We aim to make our best offer upfront, rooted in fairness, transparency, and market data.
  • We adjust salaries by location to ensure fairness, no matter where you live.

You’ll have open, transparent conversations about compensation, benefits, and what it’s like to work at College Board throughout your hiring process. Check out our careers page for more.

#LI-Remote

#LI-TheAcorn

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against The College Board's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on The College Board's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    The College Board's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.