Security-Engineer, Endpoint-Security-Engineer, Cybersecurity-Engineer Jobs

College Board – Technology – Security

Location: This is a fully remote role. Candidates who live near CB offices have the option of being fully remote or hybrid (Tuesday and Wednesday in office). All CB employees are required to occasionally travel to meet in person for business purposes.

Type: This is a full-time position

About the Team

Enterprise Security Engineering (ESE) is the security team responsible for building and operating the foundational security platforms and controls that protect College Board’s enterprise environment. The team owns a broad capability surface spanning security observability, endpoint security, network and edge security, data security, security review management, and AI security.

ESE is both an engineering team and a standards-setting function. The team designs, builds, and operates the controls that protect College Board’s workforce, data, and systems, and it owns the enterprise security standards that operationalize information security policies across the organization.

The team partners across security, Technology, and other organizational divisions to deliver integrated, measurable security outcomes. ESE engineers are technical owners who drive measurable risk reduction through automation, disciplined platform operations, and continuous improvement.

About the Opportunity

As a Security Engineer II, Endpoint Security, you will own the ongoing engineering of College Board’s application allowlist, ensuring only approved software runs on managed endpoints. You will maintain and extend allowlist coverage as software, vendors, and business needs evolve, define and adjust policy as new device groups come online, and process exception requests as they arise. Application allowlisting is a standing control, not a one-time project — it requires continuous engineering to stay effective as the environment changes, and you will make an immediate impact by keeping enforcement current, accurate, and low-friction for the business.

This role partners closely with IT, application owners, and business-unit stakeholders whose software needs must be captured and reflected in the allowlist on an ongoing basis.

In this role, you will:

Allowlist Policy Engineering and Coverage (50%)

• Maintain and extend the application allowlist baseline as software, vendors, and business needs change
• Define and adjust allowlist enforcement tiers and rollout sequencing as new device groups or business units come online
• Test and validate allowlist policy changes before enforcement to minimize business disruption
• Track and report on device coverage, blocked installs, and open risks

Exception Handling and Policy Maintenance (30%)

• Process incoming software exception requests, validating business justification against approval criteria
• Maintain the allowlist as new, approved software and vendor updates are identified
• Monitor blocked-install attempts to identify gaps, over-broad restrictions, or emerging needs
• Maintain a knowledge base of allowlist decisions and precedent to support consistent handling of future requests

Team Operations and Continuous Improvement (20%)

• Participate in team routines (planning, standups, retros) and contribute to process improvements
• Build and maintain documentation, checklists, and runbooks for allowlist policy and exception handling
• Conduct periodic audits/spot checks of allowlist adherence and exception documentation
• Continuously build endpoint security expertise through hands-on policy work and cross-team collaboration

About you, you have:

• 2 to 4 years of experience in cybersecurity, endpoint security, IT operations, or a related technical role
• Working knowledge of endpoint management and application control concepts
• Hands-on experience processing exceptions or access requests against defined criteria, with attention to detail and comfort working with structured processes (tickets, checklists, exception workflows)
• Ability to communicate clearly with end users and business stakeholders about software approvals and restrictions
• Strong organizational and documentation skills, with the discipline to keep records accurate and audit-ready
• Ability and enthusiasm to learn new security tools and technologies as required
• Authorization to work in the United States.

Nice to have:

• 1+ years of software or scripting experience (Python, PowerShell, or similar) to support automation of allowlist management or reporting
• Experience with endpoint management or application control platforms (e.g., Intune, Tanium, Carbon Black, AppLocker)
• Exposure to IT service management/ticketing platforms (e.g., ServiceNow)
• Relevant certifications (Security+, or an endpoint/EDR vendor certification)
• Experience working in a regulated or audited environment (e.g., SOX, HIPAA, PCI)

All roles at College Board require:

• A passion for expanding educational and career opportunities and mission-driven work
• Authorization to work in the United States for any employer
• Curiosity and enthusiasm for emerging technologies, with a willingness to experiment with and adopt new solutions and a comfort learning and applying new digital tools independently and proactively.
• Clear and concise communication skills, written and verbal
• A learner's mindset and a commitment to growth: welcoming diverse perspectives, giving and receiving timely, respectful feedback, and continuously improving through iterative learning and user input.
• A drive for impact and excellence: solving complex problems, making data-informed decisions, prioritizing what matters most, and continuously improving through learning, user input, and external benchmarking.
• A collaborative and empathetic approach: working across differences, fostering trust, and contributing to a culture of shared success.

About Our Process

• Application review will begin immediately and will continue until the position is filled. This role is expected to accept applications for a minimum of 5 business days.
• While the hiring process may vary, it generally includes: resume and application submission, recruiter phone/video screen, hiring manager interview, a practical exercise, a panel interview, a conversation with leadership and reference checks.

What We Offer

At College Board, we offer more than just a paycheck—we provide a meaningful career, a supportive team, and a comprehensive package designed to help you thrive. We’re a self-sustaining nonprofit that believes in fair and competitive compensation, grounded in your qualifications, experience, impact, and the market.

A Thoughtful Approach to Compensation

• The hiring range for this role is $116,000 - $125,000
• Your exact salary will depend on your location, experience, and how your background compares to others in similar roles at the College Board.
• We aim to make our best offer upfront—rooted in fairness, transparency, and market data.
• We adjust salaries by location to ensure fairness, no matter where you live.

You’ll have open, transparent conversations about compensation, benefits, and what it’s like to work at College Board throughout your hiring process. Check out our careers page for more.

Originally posted on Himalayas

Who We Are: Founded in 1960, Loews Hotels & Co operates iconic hotels and resorts across the U.S. Together, our diverse and welcoming teams craft exceptional experiences in iconic destinations.

Growth and belonging start here; you’ll be valued for who you are and the goals you have. Whether your next career chapter involves making memories for guests or supporting our properties in our Corporate Office, every role—from Guest Services to Finance, Culinary to IT—offers opportunities to grow and make a meaningful impact.

Creating a Team Member experience where you belong no matter what age, race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status that makes you, you is a daily focus for us.

What We Offer:

• Competitive health & wellness benefits, 401(k) & company match

• Paid Sick Days, Vacation, and Holidays, Paid Bereavement, Paid Pet Bereavement

• Training & Development opportunities, career growth

• Tuition Reimbursement

• Pet Insurance

• Team Member Hotel Rates, other discounts, perks and more

We are seeking candidates who can work remotely in the St. Louis area.

What We’re Looking For:

A motivated security professional eager to contribute to the improvement of Loews Hotels’ security posture. An individual with a strong security background, committed to continuous learning and the implementation of innovative solutions. An Engineer who is ready to collaborate closely with other members of the Security Operations and IT Service teams to deploy robust security measures across the enterprise. Reporting to the Manager, Endpoint Security Operations, this role serves as a significant contributor to the development, implementation, and maintenance of endpoint security solutions that safeguard against cyber threats and vulnerabilities.

Who You Are:

• A highly motivated and results driven self-starter

• An IT security enthusiast who is passionate about technology and problem solving

• A service-oriented team player who works well in a dynamic, fast paced environment

• An excellent communicator with an ability to adapt to the communication style of others

• A continuous learner that stays abreast of industry knowledge and technology

• Veterans and military spouses encouraged to apply

What You’ll Do:

• Provide subject matter expertise on endpoint security technologies including the design, configuration, integration and deployment of enterprise security software and infrastructure

• Enhance and maintain endpoint security platforms and processes including Anti-Virus, Anti Malware, Encryption, System Hardening, EDR, MDM, Web Content Management, DNS Security, Identity Solutions SIEM and Patch Management

• Perform threat analysis, monitor security events for signs of security breaches and triage any suspicious behavior

• Assist with the health, performance, stabilization and tuning of all endpoint infrastructure

• Work with senior leadership on the research and analysis of emerging technologies that enhance security capabilities and support current and future business objectives; participate in and contribute to enterprise technology evaluations and roadmap discussions with third party vendors

• Evaluate existing endpoint security solutions and participate in the design of strategies to enhance protection against emerging threats

• Assess existing security technologies to establish opportunities for improved endpoint protection controls

• Ensure security solutions, policies and procedures are sufficient to meet and respond to threats to our data and endpoint infrastructure. Recommend and provide technical support processes, metrics, and SLAs

• Maintain and enforce endpoint security policies and standards in alignment with corporate Governance, Security-Risk and Audit policies, procedures, industry regulation, best practices, and security frameworks (e.g., ISO 27001, NIST, CIS)

• Create and Deliver reports pertaining to endpoint security and compliance

• Support and document the implementation of approved endpoint security software and infrastructure components

• Oversee projects from inception to closure ensuring completion according to business requirements and stakeholder standards

• Ensure compliance with corporate Governance, Security-Risk and Audit policies, procedures, and best practices

• Perform continuous mentorship and development of junior staff members; serve as a point of contact for escalation and engagement

• Develop technical documentation, policies, and procedures for endpoint security application use and support; communicate technical standards to Information Technology teams and junior team members

• Regular attendance in conformance with standards

• May be required to work varying schedules to reflect business needs

• Required to attend all mandatory training sessions and meetings

• Demonstrate a proactive approach towards work activities

• Manage multiple projects to timely, successful completion

• Perform other duties as assigned

Your Qualifications Include:

• 4 Year college/university degree or technical degree required or applicable industry certifications (CISSP preferred) and relevant experience required

• 5+ years of experience in Information Security in an enterprise environment

• 2+ years of experience as a technical project lead and primary support role

• Extensive hands-on experience and expertise in endpoint security technologies and solutions to include:
  • Privileged Access Management
  • Endpoint Privilege Management
  • Threat hunting and remediation
  • Exploit mitigation
  • Vulnerability assessment, management, and monitoring tools
  • Anti-virus/malware telemetry
  • Configuration and operation of Windows/MAC/Linux operating systems
  • Triaging security events from SIEM and other security appliances
  • Identity and cyber security software-based tools, audits and compliance
  • Incident response, documentation, and reporting
  • Mobile device management, Cloud, security, and investigations
  • Network protocols – IP, DHCP, DNS
  • Microsoft Active Directory, Azure Active Directory and associated components
  • Web Content Management
  • Patch Management and RMM
• Strong knowledge of host and networked based attack methodologies

• Solid understanding of various governance frameworks such as ITIL and NIST

• Expertise in endpoint security best practices

• Knowledge of network and firewall infrastructure

• Preferred experience and certifications:

• • Knowledge of Security Technologies from Ivanti, Sentinel One, Palo Alto Networks, Sophos, Cisco Umbrella and Idira (formerly CyberArk)

• • Experience in retail, travel, restaurants, or hospitality

• • Experience in compliance with PCI and SOX

• • Microsoft Security Certifications

• Must be able to safely lift and carry computer equipment (computers, monitors, servers, switches, firewalls, etc.)

• Excellent analytical and problem-solving skills, with the ability to troubleshoot complex security issues

• Effective communication and interpersonal skills, with the ability to collaborate across teams

• Ability and willingness to work a flexible schedule to include weekends and holidays

• Must be willing to travel domestically or abroad up to 20% of the time

Originally posted on Himalayas