Senior Engineer, AI Product Security

College Board • Remote - Virginia, VA

1d • $153,000 - $166,000 • Remote

About The Position

The College Board Product Security team is seeking a Senior Engineer, AI Product Security to embed with assigned product and engineering teams. This role will own security across the full development lifecycle, focusing on securing AI features, implementing AI-native security tooling, and assessing/mitigating risks from AI development tools in the software supply chain. The engineer will act as a security partner in planning and grooming sessions, translating compliance and security risks into actionable guidance for engineers. Responsibilities include leading risk assessments, providing prioritization advice, driving mitigation, and coaching developers on security practices, including the responsible use of AI coding tools. This role is a blend of hands-on security engineering and organizational enablement, directly protecting platforms serving millions of students and educators.

Requirements

• 5–8 years of product security experience, including ownership of the full security engagement lifecycle—from threat modeling and architecture review through vulnerability remediation and production monitoring.
• Application security expertise across secure SDLC, CI/CD pipeline security, cloud environments (AWS preferred), and common frameworks including OWASP and CIS.
• Strong knowledge of emerging security trends in AI and agentic AI in software engineering and software products; the ability to identify industry patterns in AI risks and apply them to your day-to-day work.
• Knowledge of audit and compliance requirements (SOC 2, ISO 27002, PCI, PII), especially as they relate to the use of AI, and skill at translating them into clear guidance for engineering teams.
• Proficiency reviewing and improving application architecture for security, testability, and maintainability; hands-on experience with JavaScript/TypeScript or Python, and AWS is a plus.
• The ability to establish strong working relationships with product owners and engineering teams; experience shaping backlog prioritization and roadmap decisions from a security perspective.
• An emerging security strategy instinct: you identify risks and opportunities across team boundaries, start shaping security direction, and communicate implications clearly.
• Expertise in more than one technical domain and a commitment to keeping knowledge documented and shared, so the team never relies on one person.
• Evidence-based judgment in candidate evaluation; consistent standards across resumes and interviews.
• Ability to travel 3–5 times per year to College Board offices in New York or Reston, VA.
• A passion for expanding educational and career opportunities and mission-driven work
• Authorization to work in the United States for any employer
• Curiosity and enthusiasm for emerging technologies, with a willingness to experiment with and adopt new AI-driven solutions and comfort learning and applying new digital tools independently and proactively.
• Clear and concise communication skills, written and verbal
• A learner's mindset and a commitment to growth: welcoming diverse perspectives, giving and receiving timely, respectful feedback, and continuously improving through iterative learning and user input.
• A drive for impact and excellence: solving complex problems, making data-informed decisions, prioritizing what matters most, and continuously improving through learning, user input, and external benchmarking.
• A collaborative and empathetic approach: working across differences, fostering trust, and contributing to a culture of shared success.

Nice To Haves

• AWS is a plus.

Responsibilities

• Serve as the security partner for assigned product and engineering teams; join planning, grooming, and design sessions to advise on security architecture and flag risk early.
• Own threat models and risk assessments for assigned products; communicate security risks and mitigation plans to technical and nontechnical stakeholders.
• Own the security engagement lifecycle for each assigned product, from design review and documentation through production deployment and monitoring.
• Lead vulnerability reviews and remediation; assess exploitability to set accurate risk priority.
• Apply knowledge of emerging best practices in AI security, CB's security policies, and compliance requirements (SOC 2, ISO 27002, PCI, PII) to guide product teams.
• Write and review security design documentation and code; give and receive direct feedback in design reviews.
• Ensure assigned products meet Product Security Framework requirements; identify gaps and drive remediation.
• Coach product teams and junior engineers through discussions, code reviews, and hands-on training to advance secure SDLC practices.
• Grow and mature the AI Product Security program; develop security controls and guidance in the use of AI in software engineering, in our products, and in our security program.
• Document and share emerging security patterns; keep your knowledge accessible to the full team.
• Stay current with industry trends; apply what you learn to improve the partner program.
• Deploy and operate security tooling across cloud environments; integrate automated security controls into CI/CD pipelines.
• Contribute to roadmap planning and strategic direction: identify security risks and opportunities, escalate issues with cross-team scope, and synthesize feedback to inform priorities.
• Define and track KPIs that measure product security maturity and partner team posture; use the data to prioritize work and report progress.
• Participate in agile ceremonies; manage assigned epics and assess roadmap timelines and risk.
• Work with the Information Security team on incident response and operational initiatives.

Benefits

• Meaningful career
• Supportive team
• Comprehensive package designed to help you thrive
• Fair and competitive compensation
• Open, transparent conversations about compensation, benefits, and what it’s like to work at College Board throughout your hiring process.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed