Security Engineer II, Endpoint Security

The College Board

. Own the ongoing engineering of College Board’s application allowlist .

Posted 10/27/2026full-timeRemote • United StatesJuniorMid-Level💰 $116,000 - $125,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in endpoint security and application control, with a strong focus on managing allowlist processes and documentation. Possesses effective communication skills to engage with stakeholders and a commitment to continuous learning in emerging security technologies.

Highest-signal resume keywords

Endpoint Security ExpertiseApplication Control ConceptsException Processing ExperienceStrong Organizational SkillsClear Communication Skills

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CybersecurityEndpoint ManagementApplication ControlException WorkflowsDocumentation SkillsScripting ExperiencePolicy TestingAudit ConductingRisk TrackingSoftware Approval Processes

Soft Skills

Attention to DetailCollaborative ApproachLearner's MindsetEmpathyCuriosity

Tools & Technologies

IntuneTaniumCarbon BlackAppLockerServiceNow

Certifications & Qualifications

Security+Endpoint/EDR Vendor Certification

Industry Keywords

Regulated EnvironmentAudited EnvironmentSOXHIPAAPCI

Tech Stack

Tools & technologies

Cyber SecurityITSMPythonServiceNow

About the role

Key responsibilities & impact

Own the ongoing engineering of College Board’s application allowlist
Maintain and extend allowlist coverage as software, vendors, and business needs evolve
Define and adjust allowlist enforcement tiers and rollout sequencing for new device groups and business units
Test and validate policy changes before enforcement to minimize business disruption
Track and report device coverage, blocked installs, and open risks
Process software exception requests and validate business justification against approval criteria
Maintain the allowlist as approved software and vendor updates are identified
Monitor blocked-install attempts to identify gaps, over-broad restrictions, and emerging needs
Maintain a knowledge base of allowlist decisions and precedent
Participate in planning, standups, retrospectives, and process improvements
Build and maintain documentation, checklists, and runbooks
Conduct periodic audits and spot checks of allowlist adherence and exception documentation
Collaborate with IT, application owners, and business-unit stakeholders
Continuously develop endpoint security expertise through hands-on policy work and cross-team collaboration

Requirements

What you’ll need

2 to 4 years of experience in cybersecurity, endpoint security, IT operations, or a related technical role
Working knowledge of endpoint management and application control concepts
Hands-on experience processing exceptions or access requests against defined criteria
Attention to detail and comfort working with structured processes, tickets, checklists, and exception workflows
Ability to communicate clearly with end users and business stakeholders about software approvals and restrictions
Strong organizational and documentation skills
Ability and enthusiasm to learn new security tools and technologies
Authorization to work in the United States
Authorization to work in the United States for any employer
Curiosity and enthusiasm for emerging technologies
Clear and concise written and verbal communication skills
Learner's mindset and commitment to growth
Collaborative and empathetic approach
Nice to have: 1+ years of software or scripting experience, such as Python or PowerShell
Nice to have: Experience with endpoint management or application control platforms such as Intune, Tanium, Carbon Black, or AppLocker
Nice to have: Exposure to IT service management/ticketing platforms such as ServiceNow
Nice to have: Relevant certifications such as Security+ or an endpoint/EDR vendor certification
Nice to have: Experience in a regulated or audited environment such as SOX, HIPAA, or PCI

Benefits

Comp & perks

Fully remote work option
Hybrid work option for candidates near College Board offices (Tuesday and Wednesday in office)
Occasional travel for in-person business purposes
Comprehensive compensation and benefits package
Location-adjusted salaries
Transparent conversations about compensation and benefits throughout the hiring process
Mission-driven work
Supportive team
Professional growth and continuous learning opportunities