Security Engineer

2 weeks ago

Virginia, United States Cyber Crime Full time

College Board

College Board is a non-profit organization that clears a path for all students to own their future through the AP Program, SAT Suite, BigFuture, and more.

View company page

Technology Division, Cyber Security Operations Team 100% Remote (working EST) About the Team: The Cyber Security Operations team is critical to the strategic foundation of our products, most notably the secure delivery of our new Digital SAT and AP programs. We are a highly motivated group of cyber security experts who take a proactive approach to ensuring a strong security posture. We partner across the organization to mature our Threat Management and Incident Response

procedures and are constantly seeking and experimenting with new technologies. We are currently using a variety of cutting-edge tools that provide comprehensive cyber security operations for the College Board’s critical infrastructure in support of the College Board’s mission to connect students to college success and opportunity. College Board is committed to creating an inclusive environment where all team members feel valued, respected, and supported in their work. We welcome individuals from diverse backgrounds and experiences to join our team and contribute to our ongoing success. About the Role The College Board is seeking a Red Team Operator who will play a critical role in strengthening our cybersecurity infrastructure. This individual will validate the effectiveness of our security controls and detection logic through offensive security operations and collaborative purple teaming exercises. Leveraging their deep understanding of threat actors, they will simulate potential cyber threats across our systems while documenting their findings and methodologies. This will provide invaluable insights into vulnerabilities and serve as a roadmap for improving our security measures. The operator will also need to communicate these results effectively to various stakeholders within the organization, ensuring leadership is aware of the potential threats and can take appropriate action to mitigate them. This work is crucial to protecting the College Board from potential cyber-attacks and ensuring the safety of our data. In this role, you will: Conduct Offensive Cyber Security Operations: Execute covert operations to assess the organization’s security posture and readiness against cyber threats. Perform Penetration Testing: Conduct comprehensive assessments of the Digital Exam Player, web applications, and other systems using both manual and automated testing techniques. Engage in Purple Teaming: Facilitate collaborative exercises with internal Incident Response and Threat Hunt teams to enhance the organization’s defensive capabilities. Execute Multi-stage Attack Simulation: Coordinate with Red Team members to simulate attacks, including initial access, privilege escalation, lateral movement, and data exfiltration. Create Threat Mimicry: Mimic adversary tactics, techniques, and procedures (TTPs) to assess defensive capabilities and identify weaknesses. Conduct Security Control Evaluation: Evaluate the detection and response capabilities of security controls, such as SIEM , EDR, and network monitoring solutions. Investigate C2 Techniques: Research and integrate new C2 techniques and tools to evade detection and enhance operational capabilities. Monitor and analyze C2 traffic for anomalies and indicators of compromise (IOCs). Provide Technical Guidance: Provide technical expertise and guidance to the VTM team on building custom scanning signatures and techniques. Also, guide threat hunters on adversary behaviors, attack techniques, and IOCs. Contribute to Culture Building: Foster a culture of collaboration and continuous learning within all Cyber Operations teams. Stay abreast of emerging threats and vulnerabilities affecting web applications or endpoints and incorporate them into assessment methodologies. About you, you have: A bachelor's in computer science or equivalent work experience 7 years in IT, with 3 years in offensive security Experience in Red/Purple team exercises and penetration testing Proficiency in C2 frameworks (e.g., Cobalt Strike) and Python Certifications like CEH, OSCP, GWAPT, Sec+, or GIAC preferred Familiarity with open-source/commercial offensive security tools, assembly languages (e.g., x86), and cloud -based attacker infrastructure deployment Strong understanding of web application CWEs, OWASP Top 10, Threat Intelligence, and Threat Profiling Experience with IDS/IPS, SIEM, network defense tools, DLP technologies, network security architecture, and enterprise anti-virus/malware solutions Ability to maintain discretion and integrity at all times Our Benefits & Compensation: College Board offers a strong compensation and benefits package that attracts top talent looking to make a difference in education. Our robust benefits package includes health, dental, and vision insurance, tuition assistance, paid time off, paid parental leave, retirement benefits with a generous matching program, and more. We reward performance through annual bonuses and provide opportunities for salary

growth over time through base compensation increases, merit raises and promotions. We believe in compensating staff members fairly in relation to each other, their qualifications, and their impact. The salary range for a new employee in this position is$120,000 to $143,000. The salary offer of an individual candidate within this range is specific to their location and qualifications. Each salary offer is determined carefully using internal and external benchmarking and adjusting for the candidate’s location. You will have an opportunity to discuss salary in more detail after you begin the application process. As a self-sustaining non-profit organization with global impact, College Board offers a job that matters, a team that cares, and a place to learn, innovate and thrive About Us: We are motivated to positively impact the educational and career trajectories of millions of students a year. We prioritize building a diverse and inclusive team where every employee can thrive, and every voice is heard. We value learning and growth; we offer formal and informal ways to lead through your superpowers, sharpen your strengths, and meet your development goals. Our high-performing engineers work with the latest technologies, so you will be constantly learning and sharpening your skills, enabling you to be industry-forward instead of left behind technologically. Regions:

Remote/Anywhere

Africa

North America

Explore more InfoSec / Cybersecurity career opportunities

Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.

#J-18808-Ljbffr

  • Cyber Security Engineer

    4 weeks ago

    Virginia, United States Theqssgroup Full time

    Quantum Science Solutions is supporting a U.S. Government customer on a large mission critical development and sustainment program to design, build, deliver, and operate a network operations environment, including introducing new cyber capabilities to address emerging threats. QSS is seeking a Sr Cyber Security Engineer to support the design, development,...

  • Security Engineer II

    4 weeks ago

    Virginia, United States Paragontech Full time

    The Security Engineer II provides technical support in the areas of vulnerability assessment, risk assessment, network security, product evaluation, and security implementation. Responsible for designing and implementing solutions for protecting the confidentiality, integrity and availability of sensitive information. Provides technical evaluations of IT...

  • Cloud Security Engineer

    1 month ago

    Virginia, United States Stride Consulting LLC Full time

    Why is Strider the best place to work? Working at Strider offers a truly unique proposition for security professionals. Security is embedded in our culture Leadership and employees grasp the corporate threat profile and our value proposition which means we spend our time executing our mission without having to sell it. We are a part of the customer community...

  • Cyber Security Project Engineer with Security Clearance

    5 days ago

    Virginia, United States VTG Full time

    You will need to login before you can apply for a job. Cyber Security Project Engineer with Security Clearance Overview VTG is looking for a Cyber Security Project Engineer in McLean, VA What will you do? The Sponsor's office is responsible for the acquisition, analysis, transformation, normalization, and loading of a vast array of data types. The Sponsor's...

  • Cyber Security Engineer

    1 month ago

    Virginia, United States Cornerstone Defense Full time

    Title: Cyber Security Engineer Location: Reston, VA *Clearance: *Active TS/SCI w/ Polygraph needed to apply * Company Overview: Cornerstone Defense is the Employer of Choice within the Intelligence, Defense, and Space communities of the U.S. Government. Realizing early on that our most prized assets are our employees, we continually focus our attention on...

  • Senior Cyber Security Engineer

    1 month ago

    Virginia, United States Node Full time

    Se nior Cyber Security Engineer Location: Dulles, VA Must have an active Secret Security Clearance Node is supporting a U.S. Government customer on a large mission-critical development and sustainment program to design, build, deliver, and operate a network operations environment, including introducing new cyber capabilities to address emerging threats. Node...

  • Information Security Engineer

    4 weeks ago

    Virginia, United States IPsoft Full time

    Information Security Engineer page is loaded Information Security Engineer Apply locations Bangalore Office - BLR2 time type Full time posted on Posted 30+ Days Ago job requisition id R10001260 Collaboration between humans and machines is the ultimate opportunity for today’s enterprises, and no company is more prepared to lead this march toward a...

  • Cyber Security Engineer with Security Clearance

    4 days ago

    Virginia, United States SAIC Full time

    You will need to login before you can apply for a job. Cyber Security Engineer with Security Clearance Description INTRODUCTION: The Customer has an environment dedicated to tradecraft innovation and is a unique addition to the Intelligence Community (IC). This office incorporates new and emerging commercial technologies, along with tailored and specific...

  • Information Systems Security Engineer

    5 days ago

    Virginia, United States McIntire Solutions, LLC Full time

    Title: Information Systems Security Engineer Location: McLean, VA McIntire Solutions is seeking an ISSE to support our McLean Customer. Responsibilities include, but are not limited to: Participate as a security engineering representative on engineering teams for the design, development, implementation and/or integration of secure networking, computing, and...

  • Senior Network Security Engineer

    6 days ago

    Virginia, United States Hatchpad Full time

    Hatch I.T. is partnering with a Neovera, to find a Senior Network Security Engineer . See details below: About the Role: Neovera is seeking a seasoned, Senior Network Security Engineer to design, deploy, and configure security and networking controls on customer premise, in the Neovera Data Centers, and in cloud environments (Azure, AWS, and Oracle). This...

  • System Engineer

    6 days ago

    Virginia, United States Verite Group Full time

    Career Opportunities with Verite Group, Inc. A great place to work. Share with friends or Subscribe! Interested in a Career at Verite Group? Confidentially apply HERE . VGI is a 100% employee-owned custom software company supporting government missions and private sector enterprises for over two decades. VGI staff combine a strong technical prowess with a...

  • Network Security Tools Engineer Lvl4

    6 days ago

    Virginia, United States Solutions3 Full time

    Solutions3 LLC is supporting a U.S. Government Prime Contractor on a large mission critical development and sustainment program to design, build, deliver, and operate a network operations environment, including introducing new cyber capabilities to address emerging threats. The Network Security Tools Engineer supports the development and implementation of...

  • Cyber Security Engineer

    2 weeks ago

    Virginia Beach, United States Cornerstone Defense Full time

    Location: Virginia Type: Contract Job #3146 Title: Cyber Security Engineer *Clearance: *Active TS/SCI w/ Polygraph needed to apply * Company Overview: Cornerstone Defense is the Employer of Choice within the Intelligence, Defense, and Space communities of the U.S. Government. Realizing early on that our most prized assets are our employees, we...

  • Information Systems Security Engineer with Security Clearance

    2 weeks ago

    Virginia, United States Ingenium Consulting, LLC Full time

    You will need to login before you can apply for a job. Information Systems Security Engineer with Security Clearance In this role, you will ensure security guidelines and configurations are followed in the design and implementation of IT services. You will provide solutions to complex information systems based upon the user, policy, regulatory, and resource...

  • Information Systems Security Engineering

    7 days ago

    Virginia, United States Praxis Engineering Full time

    Information System Security Engineer (ISSE) - Expert What you will be doing: The Information System Security Engineer (ISSE) is the security expert for the High Performance Computing (HPC) infrastructure and the custom software deployed on this fabric. The ISSE works with the Information System Security Manager (ISSM), Program Management, technical and...

  • Cyber Security Engineer

    6 days ago

    Virginia, United States Capgemini Government Solutions LLC Full time

    Capgemini Government Solutions (CGS) is seeking a highly motivated Cyber Security Engineer to manage HBSS and ACAS systems. This role requires a cybersecurity engineer to provide onsite support for our customer's host–based security system (HBSS) and their assured compliance assessment solution (ACAS). Any qualified Cybersecurity Engineer will need to have...

  • Embedded Hardware Security Engineer, Senior

    6 days ago

    Virginia, United States Booz Allen Hamilton Full time

    Embedded Hardware Security Engineer, Senior page is loaded Embedded Hardware Security Engineer, Senior Apply locations Quantico, VA time type Full time posted on Posted Yesterday job requisition id R0189459 Embedded Hardware Security Engineer, Senior The Opportunity: As an electrical engineer, you understand the workings behind complex systems. That...

  • Cyber Security Engineer

    5 days ago

    Virginia, United States ASG Full time

    Abacus Solutions Group: We're built on our shared core values! We are difference-makers, passionate about serving, we work hard with integrity and do the right thing. Difference makers means that we look at every opportunity as a chance to make a difference. Passionate about serving means that we are always looking for ways to serve our customers and...

  • Network Security Engineer III

    3 days ago

    Virginia Beach, United States Imagine One Full time

    Network Security Engineer III Imagine One Technology Virginia Beach, VA (Onsite) Contractor Job Title: Network Security Engineer III Job Code: 16292878 Job Location: Naval Air Station Oceana Dam Neck, Virginia Beach Imagine One is currently seeking qualified Network Security Engineer III individuals to join our team to provide Network Security Engineering...

  • Cyber Security Engineer

    3 weeks ago

    Virginia Beach, United States Morfologica Full time

    Morfologica, Inc. is seeking several Cyber Security Engineers for work at various Federal Facilities throughout Northern Virginia. Multiple positions are available at different sites. Candidates must have previous Cyber Security experience in order to be considered. Ideal candidate will have experience in providing recommendations on the continuous...