Senior Cybersecurity Engineer — Hybrid/Remote

The New York Times Company; New York (NY); Hybrid; USD 140,000 - 160,000; Full time

Benefits offered by this job

Annual bonus

Restricted stock

Medical, dental and vision benefits

401(k) with company match

Employee stock purchase plan

Job summary

The New York Times Company is seeking a Senior Engineer, Cybersecurity to design, build, and operate security controls protecting our systems, data, and users. As part of the Security Architecture team, you will own initiatives end-to-end, drive risk reduction, and collaborate with product engineering and enterprise technology to secure our products and services.

You will partner with engineering teams to integrate security into architecture and developer workflows, perform threat modeling, and

Qualifications

• 5+ years of experience in software engineering and security engineering space.
• Understanding of security controls across a variety of security domains, including access management, encryption, vulnerability management, AI security, network security, authentication/authorization.
• Knowledge of one or more Cloud platforms (AWS, GCP) and best practices for architecting and securing.
• Experience with software engineering practices (CI/CD, GitOps, IaC, etc.) and related security practices (SAST, SCA, secure by design, shift left, etc.).
• Programming skills in at least one language (Go, Python).
• Experience with containerization and orchestration platforms.

Responsibilities

• Create an environment that favors context, not control. Empower product engineers and ensure they have the relevant information and tools to deliver secure products and services.
• Design, implement, and operate security controls and services that meet reliability, security, scalability, and observability standards.
• Partner with product and platform teams to integrate security into architecture and developer workflows while articulating business impact and tradeoffs.
• Perform security reviews, threat modeling, and risk assessments (code, design, 3rd-party apps).
• Investigate and resolve urgent and/or complex security issues, triaging effectively and driving architectural changes that prevent recurrence.
• Demonstrate support and understanding of our value of journalistic independence and a commitment to our mission to seek the truth and help people understand the world.

Skills

Go

Python

CI/CD

GitOps

IaC

Cloud AWS

Cloud GCP

Security engineering

On-call readiness

Tools

Kubernetes

Terraform

Packer

HashiCorp Vault

CI tooling

Job description

The New York Times Company is seeking a Senior Engineer, Cybersecurity to design, build, and operate security controls protecting our systems, data, and users. As part of the Security Architecture team, you will own initiatives end-to-end, drive risk reduction, and collaborate with product engineering and enterprise technology to secure our products and services.

You will partner with engineering teams to integrate security into architecture and developer workflows, perform threat modeling, and