T

The New York Times

Publishes news, sports, puzzles and recipes

Senior DevSecOps Engineer - Cybersecurity

Security Engineering & ArchitectureConfirmed live in the last 24 hours
Full-timeNew York, NY, USA

About the Job

Requirements

  • At least 5 years of experience in software engineering and security engineering.
  • Understanding of security controls across access management, encryption, vulnerability management, artificial intelligence security, network security, and authentication/authorization.
  • Knowledge of one or more cloud platforms, AWS or GCP, and best practices for architecting and securing them.
  • Experience with software engineering practices, including continuous integration/continuous delivery, GitOps, and infrastructure as code, and related security practices, including static application security testing, software composition analysis, secure-by-design, and shift-left approaches.
  • Programming skills in at least one language, Go or Python.
  • Experience with containerization and orchestration platforms.

Responsibilities

  • Empower product engineers by providing the context, information, and tools needed to deliver secure products and services.
  • Design, implement, and operate security controls and services, such as identity and access management, secrets management, endpoint and agent hardening, network segmentation, detection, and response automation, meeting reliability, security, scalability, and observability standards.
  • Partner with product and platform teams to integrate security into architecture and developer workflows while explaining business impact and tradeoffs.
  • Perform security reviews, threat modeling, and risk assessments of code, designs, and third-party applications.
  • Investigate and resolve urgent or complex security issues, triage effectively, and drive architectural changes to prevent recurrence.
  • Share learnings through RFCs, communities of practice, and other internal knowledge-sharing channels; align on standards and influence secure patterns across teams.
  • Support team growth through peer design and code reviews, pairing, and clear feedback on security engineering practices across the department.
  • Demonstrate support for journalistic independence and commitment to the mission of seeking truth and helping people understand the world.
  • Participate in limited on-call hours as determined by the on-call schedule.

Desired Qualifications

  • Security, compliance, or DevOps certifications.
  • Experience with Kubernetes.
  • Experience with Terraform and Packer.
  • Experience with HashiCorp Vault.

About the Company

The New York Times

Publishes news, sports, puzzles and recipes

The New York Times Company publishes The New York Times, a daily newspaper and news site read around the world, plus subscription products such as The Athletic for sports, Wirecutter for product reviews, NYT Games, and NYT Cooking. Its 1971 publication of the Pentagon Papers, a secret government history of the Vietnam War, led to a landmark Supreme Court ruling for press freedom. Readers follow the news, play puzzles such as Wordle, and find recipes on its websites and apps. They pay for one product or a single subscription covering all of them, while advertising, Wirecutter's shopping referral fees, and the printed newspaper bring in the rest. The Times was first published in 1851, and the company is based in New York City.

Company size
5,001-10,000
Company stage
IPO
Headquarters
New York City, New York
Founded
1851

Recently Posted Jobs

Explore more opportunities at The New York Times

See more jobs