Security Engineer II (Data Protection and Network Security)

College Board – Technology – SecurityLocation: This is a fully remote role. Candidates who live near CB offices have the option of being fully remote or hybrid (Tuesday and Wednesday in office). All CB employees are required to occasionally travel to meet in person for business purposes.

Type: This is a full-time position

About the Team

Enterprise Security Engineering (ESE) is the security team responsible for building and operating the foundational security platforms and controls that protect College Board’s enterprise environment. The team owns a broad capability surface spanning security observability, endpoint security, network and edge security, data security, security review management, and AI security.

ESE is both an engineering team and a standards-setting function. The team designs, builds, and operates the controls that protect College Board’s workforce, data, and systems, and it owns the enterprise security standards that operationalize information security policies across the organization.

The team partners across security, Technology, and other organizational divisions to deliver integrated, measurable security outcomes. ESE engineers are technical owners who drive measurable risk reduction through automation, disciplined platform operations, and continuous improvement.

About the Opportunity

As a Security Engineer II, ZScaler and DLP, you will help absorb and uplift the growing volume of ZScaler and DLP work as these controls scale across the organization. You will triage incoming tickets, support end users navigating policy blocks and exceptions, and independently tune DLP and ZScaler policies as new data types and business needs emerge. You will make an immediate impact by improving triage speed and consistency, and you will contribute to the organizational alignment needed so that ZScaler and DLP ownership, escalation paths, and exception processes are clear across Security, IT, and the business.

This role partners closely with IT, Network Engineering, Compliance, and business-unit stakeholders who rely on ZScaler and DLP for day-to-day secure operations.

In this role, you will:

Ticket Triage and User Support (50%)

• Triage incoming ZScaler and DLP tickets, categorizing by severity and routing appropriately
• Investigate and resolve common ZScaler policy blocks and DLP alerts, escalating complex cases as needed
• Support end users experiencing access or policy issues, providing clear guidance and timely resolution
• Maintain accurate ticket documentation to support SLA tracking and reporting

DLP and ZScaler Policy Tuning and Uplift (30%)

• Tune DLP detection rules and ZScaler policies to reduce false positives and negatives