Security Engineer II (Data Protection and Network Security)

College Board – Technology – Security

Location: This is a fully remote role. Candidates who live near CB offices have the option of being fully remote or hybrid (Tuesday and Wednesday in office). All CB employees are required to occasionally travel to meet in person for business purposes.

Type: This is a full-time position

About the Team

Enterprise Security Engineering (ESE) is the security team responsible for building and operating the foundational security platforms and controls that protect College Board’s enterprise environment. The team owns a broad capability surface spanning security observability, endpoint security, network and edge security, data security, security review management, and AI security.

ESE is both an engineering team and a standards-setting function. The team designs, builds, and operates the controls that protect College Board’s workforce, data, and systems, and it owns the enterprise security standards that operationalize information security policies across the organization.

The team partners across security, Technology, and other organizational divisions to deliver integrated, measurable security outcomes. ESE engineers are technical owners who drive measurable risk reduction through automation, disciplined platform operations, and continuous improvement.

About the Opportunity

As a Security Engineer II, ZScaler and DLP, you will help absorb and uplift the growing volume of ZScaler and DLP work as these controls scale across the organization. You will triage incoming tickets, support end users navigating policy blocks and exceptions, and independently tune DLP and ZScaler policies as new data types and business needs emerge. You will make an immediate impact by improving triage speed and consistency, and you will contribute to the organizational alignment needed so that ZScaler and DLP ownership, escalation paths, and exception processes are clear across Security, IT, and the business.

This role partners closely with IT, Network Engineering, Compliance, and business-unit stakeholders who rely on ZScaler and DLP for day-to-day secure operations.

In this role, you will:

Ticket Triage and User Support (50%)

• Triage incoming ZScaler and DLP tickets, categorizing by severity and routing appropriately
• Investigate and resolve common ZScaler policy blocks and DLP alerts, escalating complex cases as needed
• Support end users experiencing access or policy issues, providing clear guidance and timely resolution
• Maintain accurate ticket documentation to support SLA tracking and reporting

DLP and ZScaler Policy Tuning and Uplift (30%)

• Tune DLP detection rules and ZScaler policies to reduce false positives and negatives
• Support rollout of new ZScaler and DLP policy changes across business units
• Maintain a registry of active policies, exceptions, and their business justifications
• Contribute to testing and validation of policy changes before production deployment

Organizational Alignment and Documentation (20%)

• Support development of a clear RACI and escalation path for ZScaler/DLP issues across Security, IT, and business stakeholders
• Build and maintain knowledge base articles, runbooks, and triage playbooks
• Participate in team routines (planning, standups, retros) and contribute to process improvements
• Assist in producing recurring reports on ticket volume, SLA performance, and outstanding alignment gaps

About you, you have:

• 2 to 4 years of experience in cybersecurity, IT operations, network security, or a related technical role
• Working knowledge of network security concepts and/or data protection principles (DLP, secure web gateways, ZTNA)
• Hands-on experience investigating and resolving policy or access issues, with attention to detail in triage and documentation and comfort working with structured processes (tickets, checklists, SLAs)
• Ability to communicate clearly with end users and stakeholders across technical and non-technical audiences
• Strong organizational and documentation skills, with the discipline to keep records accurate and audit-ready
• Ability and enthusiasm to learn new security tools and technologies as required
• Authorization to work in the United States.

Nice to have:

• 1+ years of software or scripting experience (Python, PowerShell, or similar) to support automation of triage, reporting, or policy tuning
• Experience with SIEM or IT service management/ticketing platforms (e.g., Servi…