About the Team The DevSecOps Engineering team builds sustainable, resilient, and well-engineered software solutions to solve problems in the product security domain within the larger Product Security organization. The team of four remote full-stack engineers operates using Agile development methods and collaborates daily using ensemble programming, also known as mob programming. The team works on a wide variety of problems, including auto-remediation of cloud vulnerabilities across our entire cloud environment and the integration of security tools in CICD pipelines. About the Opportunity As a Senior Full Stack Engineer within DevSecOps Engineering, you will collaborate closely with other engineers on the team using ensemble or mob programming methodologies to build and operate product security solutions in support of College Board's mission. You will use a variety of technologies to build, operate, and maintain software and automation solutions in an ever-growing cloud environment. The team's solutions will support the secure delivery of all College Board digital products including Digital Assessment Platform, PowerFAIDS Cloud, and BigFuture. In this role, you will: * Collaborate daily with other engineers on the team using mob programming to solve complex technical problems through software engineering. * Implement automated solutions, based on a set of standards and processes, that enable College Board developers to easily consume security and compliance services delivered by the Product Security team. * Coordinate with other engineers, architects, and teams in implementing a comprehensive cloud and application security program in a DevOps environment. * Drive continuous improvement of the team's engineering practices, efficiency, speed, and quality. * Leverage automated tools to build, harden, maintain, and instrument a comprehensive cloud-based security orchestration platform to be consumed in product CI/CD pipelines. * Develop automated security and compliance capabilities in support of DevOps processes in a large-scale AWS cloud computing environment. * Write complex code, building infrastructure as code, work with immutable "cloud" based environments, and build the supporting automated toolsets necessary to support the secure continuous delivery pipeline. * Integrate security practices across the CI/CD pipeline to provide a comprehensive automated cloud and application security solution from the epic definition, development, test and deploy of CB applications within our AWS environments. * Support the development of software engineering standards by creating templates and patterns to increase the productivity of the security program across the entire College Board organization. * Foster, and build a community of practice for collective learning of security tools, practices, and systems across all disciplines. About you You have: * Love of learning and a growth mindset. Software engineering is your craft, not just your job. * Demonstrated software engineering experience and proficiency using JavaScript and TypeScript. * 3 years or more experience with extensive exposure to numerous aspects of software engineering and demonstrated full stack proficiency using JavaScript and TypeScript. * Deep understanding of Amazon Web Services (AWS) including IAM, KMS, EC2, Event Bridge, ECS, Config, CloudTrail, CloudFormation, Lambda, and others using AWS CloudFormation, CDK or Serverless Framework. * Working knowledge of IP networking, VPNs, DNS, load balancing and firewalling. * Experience in establishing software engineering guidelines and in performing code and design reviews. * Experience in documenting design and architecture artifacts and presenting artifacts for architectural review. Differentiators * Experience in pair programming or mob programming methodologies. * Experience in DevOps and CICD automation and tooling. * Strong knowledge of cloud security, application security, and security engineering. * Experience working as part of a Platform Engineering team and/or contributing to open-source projects. * An AWS professional level certification, AWS Security Specialty certification is a plus. * Experience developing client applications using the Electron framework. About Our Process * Application review will begin immediately and will continue until the position is filled * While the hiring process may vary, it generally includes resume and application submission, recruiter phone screen, hiring manager interview, performance exercise such as live coding, a panel interview, a conversation with leadership and reference checks About Our Benefits and Compensation College Board offers a competitive benefits and compensation program that attracts top talent looking to make a difference in education. As a self-sustaining non-profit, we believe in compensating employees equitably in relation to each other, their qualifications, their impact, and the relevant market. The hiring range for a new employee in this position is $144,000 to $157,000. College Board differentiates salaries by location so where you live will narrow the portion of this range in which you can expect a salary. Your salary will be carefully determined based on your location, relevant experience, the external labor market, and the pay of College Board employees in similar roles. College Board strives to provide our best offer up front based on these criteria. Your salary is only one part of all that College Board offers, including but not limited to: * A comprehensive package designed to support the well-being of employees and their families and promote education. Our robust benefits package includes health, dental, and vision insurance, generous paid time off, paid parental leave, fertility benefits, pet insurance, tuition assistance, retirement benefits, and more * Recognition of exceptional performance through annual bonuses, salary growth over time through market increases, and opportunities for merit raises and promotions based on increased scope of responsibility * A job that matters, a team that cares, and a place to learn, innovate and thrive You can expect to have transparent conversations about benefits and compensation with our recruiters throughout your application process. #LI-DC1 #LI-REMOTE
