Senior Software Engineer
AI summary of the role
Senior Full Stack Engineer on the Cloud and Platform Security Engineering team, building automated security guardrails and vulnerability management workflows across AWS.
What you’ll do
- Design and implement automated preventive and detective guardrails across enterprise cloud environments.
- Enhance and operationalize Unified Vulnerability Management (UVM) workflows to improve prioritization and remediation velocity.
- Increase automation across vulnerability intake, enrichment, ticketing, and response workflows.
- Design and implement standardized security checks in Backstage and establish a product security maturity model.
What you’ll bring
- 5+ years of software engineering experience with full stack proficiency in JavaScript and TypeScript.
- Deep understanding of AWS services (IAM, KMS, EC2, Event Bridge, ECS, Config, CloudTrail, CloudFormation, Lambda) and infrastructure-as-code (CloudFormation, CDK, or Serverless Framework).
- Working knowledge of IP networking, VPNs, DNS, load balancing, and firewalling.
- Experience establishing software engineering guidelines and performing code/design reviews.
Technologies
JavaScript · TypeScript · AWS · CloudFormation · CDK · Serverless Framework · Backstage · CSPM · Tines · WAF · CloudGuard · SQL
About College Board
Nonprofit behind SAT, AP, Bluebook, BigFuture, CSS Profile, and CLEP, connecting students, schools, districts, states, colleges, and scholarship programs.
Bootstrapped · 2000–5000 people
Source and classification
Internal deployment & tooling · Evidence for this classification:
College Board – Technology – Cloud Security Location: This is a fully remote role. Candidates who live near CB offices have the option of being fully remote or hybrid (Tuesday and Wednesday in office). Type: This is a full-time position About the Team The College Board’s Cloud and Platform Security Engineering (CPSE) team designs, builds, and secures the cloud foundation that powers our most critical applications and services. We partner closely with product engineering, platform, risk, compliance, and application teams to design, automate, and operationalize scalable security controls, building reusable tooling and guardrails that make secure application deployments the default across AWS environments. Rather than operating as a reactive review function, we implement preventive and detective controls that reduce systemic risk while enabling teams to move quickly. Our work spans
More from the job description
College Board – Technology – Cloud Security Location: This is a fully remote role. Candidates who live near CB offices have the option of being fully remote or hybrid (Tuesday and Wednesday in office). Type: This is a full-time position About the Team The College Board’s Cloud and Platform Security Engineering (CPSE) team designs, builds, and secures the cloud foundation that powers our most critical applications and services. We partner closely with product engineering, platform, risk, compliance, and application teams to design, automate, and operationalize scalable security controls, building reusable tooling and guardrails that make secure application deployments the default across AWS environments. Rather than operating as a reactive review function, we implement preventive and detective controls that reduce systemic risk while enabling teams to move quickly. Our work spans multi-account cloud architecture, identity and access management, network segmentation, automation, detection engineering, and compliance alignment. We focus on scalable, repeatable solutions that strengthen security posture across the enterprise. About the Opportunity As a Senior Full Stack Engineer within CPSE, you will collaborate closely with other engineers on the team using ensemble or mob programming methodologies to build and operate product security solutions in support of College Board’s [... source excerpt omitted ...] ever-growing cloud environment. The team’s solutions will support the secure delivery of all College Board digital products, and ensure security of College Board infrastructure. You will work across cloud environments to expand automated guardrails, improve external exposure management, and reduce high-risk misconfigurations through enforceable, enterprise-wide controls. This role emphasizes secure-by-default architecture, infrastructure automation, and measurable risk reduction, ensuring security controls are consistently applied as the organization scales. In partnership with Cloud Engineering, Product Security, and Cyber Operations, you will enhance vulnerability management [... source excerpt omitted ...] ge capabilities. You will help drive improved remediation velocity, clearer security posture visibility, and more efficient security operations through engineering-led solutions. You will also contribute to the resilience and reliability of critical security platforms, ensuring continuity of monitoring and posture management capabilities while supporting modernization efforts. Success in this role means delivering durable, scalable security outcomes: stronger preventive coverage, reduced exposure windows, improved operational efficiency, and measurable improvements in enterprise security posture. In this role, you will: Strengthen Cloud Guardrails and Preventive Controls (50%)
Employer postings · Data from · Sources