Security Engineer II (Data Protection and Network Security)

collegeboard; United States; Remote; USD 90,000 - 130,000; Full time

Job summary

College Board is seeking a Security Engineer II to help scale ZScaler and DLP controls across the organization. You will triage tickets, assist end users with policy blocks, and tune security policies while aligning with IT and business stakeholders.

This fully remote role offers nationwide flexibility and collaboration with IT, Network Engineering, Compliance, and business units to maintain effective security operations and accurate documentation.

Qualifications

• 2 to 4 years of experience in cybersecurity, IT operations, network security, or a related technical role.
• Working knowledge of network security concepts and data protection principles (DLP, secure web gateways, ZTNA).
• Hands-on experience investigating and resolving policy or access issues with structured documentation and SLAs.
• Ability to communicate clearly with end users and stakeholders across technical and non-technical audiences.
• Strong organizational and documentation skills, with audit-ready records.
• Willingness to learn new security tools and technologies as required.
• Authorization to work in the United States.

Responsibilities

• Triage ZScaler and DLP tickets and route by severity.
• Investigate policy blocks and DLP alerts; resolve issues.
• Support end users with access issues and provide guidance.
• Maintain ticket documentation for SLA tracking.
• Tune DLP rules and ZScaler policies to reduce false positives.
• Roll out policy changes across business units.
• Maintain registry of active policies and justifications.
• Test policy changes before production deployment.
• Develop clear RACI and escalation paths for ZScaler/DLP issues.
• Create knowledge base articles, runbooks, and triage playbooks.
• Participate in team routines and contribute to process improvements.
• Produce reports on ticket volume and SLA performance.

Skills

Network security concepts

Data protection principles (DLP)

Policy troubleshooting & triage

Documentation & audit readiness

User-facing communication

Learning new security tools

US work authorization

Tools

SIEM

ServiceNow / ITSM

Splunk

ZScaler / DLP tooling

Job description

College Board - Technology - Security

Location: This is a fully remote role. Candidates who live near CB offices have the option of being fully remote or hybrid (Tuesday and Wednesday in office). All CB employees are required to occasionally travel to meet in person for business purposes.

Type: This is a full-time position

About the Team

Enterprise Security Engineering (ESE) is the security team responsible for building and operating the foundational security platforms and controls that protect College Board's enterprise environment. The team owns a broad capability surface spanning security observability, endpoint security, network and edge security, data security, security review management, and AI security. ESE is both an engineering team and a standards-setting function. The team designs, builds, and operates the controls that protect College Board's workforce, data, and systems, and it owns the enterprise security standards that operationalize information security policies across the organization. The team partners across security, Technology, and other organizational divisions to deliver integrated, measurable security outcomes. ESE engineers are technical owners who drive measurable risk reduction through automation, disciplined platform operations, and continuous improvement.

About the Opportunity

As a Security Engineer II, ZScaler and DLP, you will help absorb and uplift the growing volume of ZScaler and DLP work as these controls scale across the organization. You will triage incoming tickets, support end users navigating policy blocks and exceptions, and independently tune DLP and ZScaler policies as new data types and business needs emerge. You will make an immediate impact by improving triage speed and consistency, and you will contribute to the organizational alignment needed so that ZScaler and DLP ownership, escalation paths, and exception processes are clear across Security, IT, and the business.

This role partners closely with IT, Network Engineering, Compliance, and business-unit stakeholders who rely on ZScaler and DLP for day-to-day secure operations.

In this role, you will:

• Ticket Triage and User Support (50%)
  • Triage incoming ZScaler and DLP tickets, categorizing by severity and routing appropriately
  • Investigate and resolve common ZScaler policy blocks and DLP alerts, escalating complex cases as needed
  • Support end users experiencing access or policy issues, providing clear guidance and timely resolution
  • Maintain accurate ticket documentation to support SLA tracking and reporting
• DLP and ZScaler Policy Tuning and Uplift (30%)
  • Tune DLP detection rules and ZScaler policies to reduce false positives and negatives
  • Support rollout of new ZScaler and DLP policy changes across business units
  • Maintain a registry of active policies, exceptions, and their business justifications
  • Contribute to testing and validation of policy changes before production deployment
• Organizational Alignment and Documentation (20%)
  • Support development of a clear RACI and escalation path for ZScaler/DLP issues across Security, IT, and business stakeholders
  • Build and maintain knowledge base articles, runbooks, and triage playbooks
  • Participate in team routines (planning, standups, retros) and contribute to process improvements
  • Assist in producing recurring reports on ticket volume, SLA performance, and outstanding alignment gaps

About you, you have:

• 2 to 4 years of experience in cybersecurity, IT operations, network security, or a related technical role
• Working knowledge of network security concepts and/or data protection principles (DLP, secure web gateways, ZTNA)
• Hands-on experience investigating and resolving policy or access issues, with attention to detail in triage and documentation and comfort working with structured processes (tickets, checklists, SLAs)
• Ability to communicate clearly with end users and stakeholders across technical and non-technical audiences
• Strong organizational and documentation skills, with the discipline to keep records accurate and audit-ready
• Ability and enthusiasm to learn new security tools and technologies as required
• Authorization to work in the United States.

Nice to have:

• 1+ years of software or scripting experience (Python, PowerShell, or similar) to support automation of triage, reporting, or policy tuning
• Experience with SIEM or IT service management/ticketing platforms (e.g., ServiceNow, Splunk)
• Exposure to cloud security or network architecture concepts
• Relevant certifications (Security+, Network+, or a ZScaler/DLP vendor certification)
• Experience working in a regulated or audited environment (e.g., SOX, HIPAA, PCI

All roles at College Board require:

• A passion for expanding educational and career opportunities and mission-driven work
• Authorization to work in the United States for any employer
• Curiosity and enthusiasm for emerging technologies, with a willingness to experiment with and adopt new solutions and a comfort learning and applying new digital tools independently