Senior Engineer, Data Security Analyst

The College Board

Senior Engineer responsible for data security and risk management within College Board. Collaborating with teams to implement security controls and maintain data integrity in regulatory environments.

Posted 4/25/2026full-time🇺🇸 United StatesSenior💰 $153,000 - $166,000 per yearWebsite

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityPython

About the role

Key responsibilities & impact

Define, implement, and maintain data classification, handling, and access control policies and standards across cloud and on-prem environments, leveraging data analytics to ensure policies address current threats.
Configure and tune DLP tools, DSPM, CASB, and cloud-native security controls to detect and prevent exfiltration of sensitive data or models, using statistical and machine learning techniques to optimize detection thresholds and reduce false positives.
Map and inventory sensitive data using security tools and support automated tagging to better inform security controls and data lifecycle management.
Provide subject matter expertise on encryption, tokenization, and access management for structured, semi-structured, and unstructured data.
Participate in risk assessments, control testing, and audits as needed with data owners across the organization, applying data-driven analysis to quantify risks and support evidence-based remediation plans.
Recommend enhancements to data protection tooling and processes based on emerging threats and lessons learned, incorporating trends from security analytics and predictive risk modeling.
Monitor data security alerts and anomalies supported by College Board’s security tools.
Triage data-related security events, interfacing with data custodians and escalating to the Cyber Defense Team as needed, leveraging behavioral analytics to improve prioritization.
Assist Cyber Defense in DLP investigations, utilizing forensic and data mining techniques to support root cause analysis.
Maintain awareness of threats and behavioral risks tied to data access, incorporating insights from user and entity behavior analytics (UEBA).
Utilize internal AI agents to enable more accurate reviews, helping to automate the identification of high-risk data interactions and enhance the speed of investigation.
Work with Legal, Privacy, and Data Governance teams to align data protection practices with policies and laws.
Support regulatory and internal compliance needs related to data handling and privacy laws by providing evidence or information to Privacy or GRC as requested.
Deliver regular data security related reporting and metrics, incorporating trends, KPIs, and predictive indicators that highlight risks and drive continuous improvement.

Requirements

What you’ll need

5+ years of experience in data security, cybersecurity, or information protection roles
Proven ability to leverage AI/ML or advanced analytics to uncover hidden risks, reduce false positives, and guide security decision-making.
Experience building AI-driven agents or automation scripts to accelerate DLP scans and/or investigations, prioritize alerts, or enrich incident data with contextual insights (Python experience is preferred)
Hands-on expertise with data protection and governance tools and familiarity with leveraging these tools for data discovery, classification, and analytics
Strong working knowledge of security principles including data classification, access control, encryption, tokenization, and privacy-by-design, with the ability to apply these concepts through a data-driven lens
Experience working with AWS and Azure data sources, including the ability to analyze data flows and monitor risks to the data in cloud-native environments
Experience conducting investigations into data loss, insider threats, or anomalous access behaviors using SIEM or endpoint security tools, and enhancing detection through behavioral analysis or anomaly detection models
Excellent communication and collaboration skills, including the ability to translate technical findings for non-technical stakeholders and work cross-functionally across security, legal, IT, and data teams
Strong organizational and analytical skills, with the ability to derive insights from large or complex datasets to inform security decision-making
You are authorized to work in the United States.

Benefits

Comp & perks

Annual bonuses and opportunities for merit-based raises and promotions
A mission-driven workplace where your impact matters
A team that invests in your development and success

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

data securitycybersecurityinformation protectiondata classificationaccess controlencryptiontokenizationdata loss prevention (DLP)machine learningPython

Soft Skills

communicationcollaborationorganizational skillsanalytical skills