Senior DevSecOps Engineer, Cybersecurity

Thenewyorktimes; New York (NY); On-site; USD 145,000 - 165,000; Full time

Benefits offered by this job

Medical, dental and vision benefits

Flexible Spending Accounts

Company-matching 401(k) plan

Paid vacation and sick days

Tuition reimbursement

Professional development programs

Job summary

Thenewyorktimes is seeking a Senior Engineer in Cybersecurity to design, implement, and operate security measures that protect their systems and users. This role involves collaboration with various teams along with performing security assessments and managing security controls.

Ideal candidates should possess over 5 years of experience in engineering, strong knowledge in security domains, and proficiency in programming languages such as Go or Python. Competitive benefits and salary range of $145,000–$165,000 USD offered.

Qualifications

• 5+ years of experience in software engineering and/or security engineering.
• Understanding of various security domains including access management and AI security.
• Knowledge of best practices for architecting and securing Cloud platforms.

Responsibilities

• Design and implement security controls and services.
• Perform security reviews and risk assessments.
• Integrate security into architecture and developer workflows.

Skills

Software engineering experience

Security controls knowledge

Cloud platform knowledge (AWS, GCP)

CI/CD and GitOps practices

Programming skills (Go, Python)

Containerization and orchestration

Tools

Kubernetes

Terraform

HashCorp Vault

Job description

About the Role

The Senior Engineer, Cybersecurity is a hands‑on contributor who designs, builds, and operates security controls and services that protect The Times' systems, data, and users. As a member of the Security Architecture team, you will own complex initiatives end‑to‑end, drive measurable risk reduction, and collaborate across product engineering and enterprise technology with technical depth, operational rigor, and clear communication aligned with business outcomes.

Responsibilities

• Create an environment that favors context, not control. Empower product engineers and ensure they have the relevant information and tools to deliver secure products and services.
• Design, implement, and operate security controls and services (e.g., identity and access management, secrets management, endpoint/agent hardening, network segmentation, detection, and response automation) that meet reliability, security, scalability, and observability standards.
• Partner with product and platform teams to integrate security into architecture and developer workflows while articulating business impact and tradeoffs.
• Perform security reviews, threat modeling, and risk assessments (code, design, 3rd-party apps).
• Investigate and resolve urgent and/or complex security issues, triaging effectively and driving architectural changes that prevent recurrence.
• Participate via RFCs, community of practices, and other internal knowledge sharing channels to share learnings, align on standards, and influence secure patterns across areas; model The Times' core values in cross‑functional collaboration.
• Support team growth through peer design/code review, pairing, and clear feedback.
• Demonstrate support and understanding of our value of journalistic independence and a strong commitment to our mission to seek the truth and help people understand the world.
• This role reports to the Director of Engineering, Cybersecurity.

Basic Qualifications

• 5+ years of experience in software engineering and/or security engineering space
• Understanding of security controls across a variety of security domains, including access management, encryption, vulnerability management, AI security, network security, authentication/authorization, etc
• Knowledge of one or more Cloud platforms (AWS, GCP) and best practices for architecting and securing
• Experience with software engineering practices (CI/CD, GitOps, IaC, etc.) and related security practices (SAST, SCA, secure by design, shift left, etc.)
• Programming skills in at least one language (Go, Python)
• Experience with containerization and orchestration platforms

Preferred Qualifications

• Security/Compliance or DevOps certifications
• Experience with Kubernetes
• Experience with Terraform and Packer
• Experience with HashCorp Vault

The annual base pay range for this role is between $145,000 and $165,000 USD.

For roles in the U.S., you may be eligible for variable pay, such as an annual bonus and restricted stock. Benefits may include medical, dental and vision benefits, Flexible Spending Accounts, a company‑matching 401(k) plan, paid vacation, paid sick days, paid parental leave, tuition reimbursement and professional development programs. For roles outside of the U.S., information on benefits will be provided during the interview process.

We are an Equal Opportunity Employer and do not discriminate on the basis of an individual's sex, age, race, color, creed, national origin, alienage, religion, marital status, pregnancy, sexual orientation or affectionate preference, gender identity and expression, disability, genetic trait or predisposition, carrier status, citizenship, veteran or military status and other personal characteristics protected by law. All applications will receive consideration for employment without regard to legally protected characteristics. The U.S. Equal Employment Opportunity Commission (EEOC)’s Know Your Rights Poster is available.

The New York Times Company will provide reasonable accommodations as required by applicable federal, state, and/or local laws. Individuals seeking an accommodation for the application or interview process should email [e-mail].

The Company encourages those with criminal histories to apply, and will consider their applications in a manner consistent with applicable "Fair Chance" laws, including but not limited to the NYC Fair Chance Act, the Los Angeles Fair Chance Initiative for Hiring Ordinance, the San Francisco Fair Chance Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act.