Endpoint Security Engineer II - Application Allowlisting

collegeboard

United States

Remote

USD 110,000 - 150,000

Full time

6 days ago
Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

College Board is seeking a Security Engineer II, Endpoint Security, to own the ongoing engineering of the application allowlist, ensuring only approved software runs on managed endpoints. You will extend coverage as needs evolve, adjust policy for new device groups, and process exceptions while keeping enforcement current and low-friction for the business.

This role partners with IT, application owners, and business-unit stakeholders to maintain an accurate allowlist continuously.

Qualifications

  • 2 to 4 years of cybersecurity/endpoint security experience.
  • Experience with endpoint management and application control concepts.
  • Experience processing exceptions or access requests against defined criteria.
  • Strong communication with end users and stakeholders about software approvals and restrictions.
  • Strong documentation and audit-ready record keeping.
  • Authorization to work in the United States.

Responsibilities

  • Allowlist policy engineering and coverage (50%). Maintain and extend the allowlist baseline as software, vendors, and business needs change.
  • Define and adjust allowlist enforcement tiers and rollout sequencing as new device groups or business units come online.
  • Test and validate allowlist policy changes before enforcement to minimize business disruption.
  • Track and report on device coverage, blocked installs, and open risks.

Skills

Endpoint security
Exception handling
Documentation
Stakeholder communication
Learning security tools

Education

Security+ certification

Tools

Intune
Tanium
Carbon Black
AppLocker

Job description

College Board is seeking a Security Engineer II, Endpoint Security, to own the ongoing engineering of the application allowlist, ensuring only approved software runs on managed endpoints. You will extend coverage as needs evolve, adjust policy for new device groups, and process exceptions while keeping enforcement current and low-friction for the business.

This role partners with IT, application owners, and business-unit stakeholders to maintain an accurate allowlist continuously.

Get your free, confidential resume review.

or drag and drop your file here.

Similar jobs

Similar jobs worth comparing

Remote Security Engineer II: Endpoint Allowlisting
Remote Security Engineer II: Endpoint Allowlisting

Partner Company • United States

Remote
USD 85,000 - 120,000
Security Engineer II (Endpoint Security)
Security Engineer II (Endpoint Security)

collegeboard • United States

Remote
USD 110,000 - 150,000
Security Engineer II (Endpoint Security) (Fully Remote)
Security Engineer II (Endpoint Security) (Fully Remote)

Partner Company • United States

Remote
USD 85,000 - 120,000
Application Allowlisting Engineer - Windows & PowerShell
Application Allowlisting Engineer - Windows & PowerShell

Apex Systems • Chicago (IL)

On-site
USD 96,000 - 156,000
Endpoint Security Engineer — Patch & Deployment Pro
Endpoint Security Engineer — Patch & Deployment Pro

Key Business Solutions, Inc. • Richmond (VA)

Hybrid
USD 110,000 - 140,000
Endpoint Management & Security Engineer II
Endpoint Management & Security Engineer II

CallTower Inc • Birmingham (AL)

On-site
USD 65,000 - 95,000
Annual market comp evaluation
85% employer paid medical plans (HDHP和
Dental/Vision
+4
Endpoint Security & Deployment Engineer
Endpoint Security & Deployment Engineer

Mbi Llc • Richmond (VA)

On-site
USD 90,000 - 130,000
Security Engineer II: ZScaler & DLP Policy Tuning (Remote)
Security Engineer II: ZScaler & DLP Policy Tuning (Remote)

collegeboard • United States

Remote
USD 90,000 - 130,000
IT Security - Endpoint Engineer
IT Security - Endpoint Engineer

Lateral Insights • Great Falls (VA)

On-site
USD 80,000 - 120,000
Endpoint Security Engineer III
Endpoint Security Engineer III

Blue Origin • United States

On-site
USD 150,000 - 190,000