Senior DevSecOps Engineer, Cybersecurity

About the role

<div class="content-intro"><div id="labeledImage.LOCATION" class="WIFG" data-automation-id="decorationWrapper"> <div class="WNHJ"> <div id="labeledImage.LOCATION--uid38" class="WE-Y WMXY WBAB WF0Y" data-automation-id="responsiveMonikerInput" data-metadata-id="labeledImage.LOCATION" data-uxi-form-item-child-list-index="0"> <div class="WJ-Y"> <p><strong>The <a href="https://www.nytco.com/mission-and-values/" target="_blank"><u>mission</u></a> of The New York Times is to seek the truth and help people understand the world. That means independent journalism is at the heart of all we do as a company. It's why we have a world-renowned newsroom that sends journalists to report on the ground from nearly 160 countries. It's why we focus deeply on how our readers will experience our journalism, from print to audio to a world-class digital and app destination. The listing location is New York, NY; Remote

USA.

Key facts

What you'll do

• <div class="content-intro"><div id="labeledImage.LOCATION" class="WIFG" data-automation-id="decorationWrapper"> <div class="WNHJ"> <div id="labeledImage.LOCATION--uid38" class="WE-Y WMXY WBAB WF0Y" data-automation-id="responsiveMonikerInput" data-metadata-id="labeledImage.LOCATION" data-uxi-form-item-child-list-index="0"> <div class="WJ-Y"> <p><strong>The <a href="https://www.nytco.com/mission-and-values/" target="_blank"><u>mission</u></a> of The New York Times is to seek the truth and help people understand the world.
• That means independent journalism is at the heart of all we do as a company.
• It's why we have a world-renowned newsroom that sends journalists to report on the ground from nearly 160 countries.
• It's why we focus deeply on how our readers will experience our journalism, from print to audio to a world-class digital and app destination.
• And it's why our business strategy centers on making journalism so good that it's worth paying for. </strong></p> </div> </div> </div> </div></div><p data-pm-slice="1 1 []"><strong>About the Role</strong></p> <p>The Senior Engineer, Cybersecurity is a hands-on contributor who designs, builds, and operates security controls and services that protect The Times' systems, data, and users.
• As a member of the Security Architecture team, you will own complex initiatives end-to-end, drive measurable risk reduction, and collaborate across product engineering and enterprise technology with technical depth, operational rigor, and clear communication aligned with business outcomes.</p> <p>Cybersecurity helps prevent The Times from becoming news.
• Our teams work to protect the news makers, their support staff, the platforms they rely on every day, as well as all of The Times' products and services, and our readers who consume them.</p> <p><strong>Responsibilities:</strong></p> <ul> <li>Create an environment that favors context, not control.
• Empower product engineers and ensure they have the relevant information and tools to deliver secure products and services.</li> <li>Design, implement, and operate security controls and services (e.g., identity and access management, secrets management, endpoint/agent hardening, network segmentation, detection, and response automation) that meet reliability, security, scalability, and observability standards.</li> <li>Partner with product and platform teams to integrate security into architecture and developer workflows while articulating business impact and tradeoffs.</li> <li>Perform security reviews, threat modeling, and risk assessments (code, design, 3rd-party apps).</li> <li>Investigate and resolve urgent and/or complex security issues, triaging effectively and driving architectural changes that prevent recurrence.</li> <li>Participate via RFCs, community of practices, and other internal knowledge sharing channels to share learnings, align on standards, and influence secure patterns across areas; model The Times' core values in cross-functional collaboration.</li> <li>Support team growth through peer design/code review, pairing, and clear feedback.</li> <li>Demonstrate support and understanding of our <a href="https://www.nytco.com/company/mission-and-values/" target="_blank">value of journalistic independence</a> and a strong commitment to our mission to seek the truth and help people understand the world.</li> <li>This role reports to the Director of Engineering, Cybersecurity.</li> </ul> <p><strong>Basic Qualifications:</strong></p> <ul> <li>5+ years of experience in software engineering and/or security engineering space</li> <li>Understanding of security controls across a variety of security domains, including access management, encryption, vulnerability management, AI security, network security, authentication/authorization, etc</li> <li>Knowledge of one or more Cloud platforms (AWS, GCP) and best practices for architecting and securing</li> <li>Experience with software engineering practices (CI/CD, GitOps, IaC, etc.) and related security practices (SAST, SCA, secure by design, shift left, etc.)</li> <li>Programming skills in at least one language (Go, Python)</li> <li>Experience with containerization and orchestration platforms</li> </ul> <p><strong>Preferred Qualifications:</strong></p> <div class="has-nudge" data-nudge-id="4fc802f3-c29f-4c3f-ad33-565968297a0c"> <ul> <li>Securi

Requirements

• It's why we focus deeply on how our readers will experience our journalism, from print to audio to a world-class digital and app destination.
• Empower product engineers and ensure they have the relevant information and tools to deliver secure products and services.</li> <li>Design, implement, and operate security controls and services (e.g., identity and access management, secrets management, endpoint/agent hardening, network segmentation, detection, and response automation) that meet reliability, security, scalability, and observability standards.</li> <li>Partner with product and platform teams to integrate security into architecture and developer workflows while articulating business impact and tradeoffs.</li> <li>Perform security reviews, threat modeling, and risk assessments (code, design, 3rd-party apps).</li> <li>Investigate and resolve urgent and/or complex security issues, triaging effectively and driving architectural changes that prevent recurrence.</li> <li>Participate via RFCs, community of practices, and other internal knowledge sharing channels to share learnings, align on standards, and influence secure patterns across areas; model The Times' core values in cross-functional collaboration.</li> <li>Support team growth through peer design/code review, pairing, and clear feedback.</li> <li>Demonstrate support and understanding of our <a href="https://www.nytco.com/company/mission-and-values/" target="_blank">value of journalistic independence</a> and a strong commitment to our mission to seek the truth and help people understand the world.</li> <li>This role reports to the Director of Engineering, Cybersecurity.</li> </ul> <p><strong>Basic Qualifications:</strong></p> <ul> <li>5+ years of experience in software engineering and/or security engineering space</li> <li>Understanding of security controls across a variety of security domains, including access management, encryption, vulnerability management, AI security, network security, authentication/authorization, etc</li> <li>Knowledge of one or more Cloud platforms (AWS, GCP) and best practices for architecting and securing</li> <li>Experience with software engineering practices (CI/CD, GitOps, IaC, etc.) and related security practices (SAST, SCA, secure by design, shift left, etc.)</li> <li>Programming skills in at least one language (Go, Python)</li> <li>Experience with containerization and orchestration platforms</li> </ul> <p><strong>Preferred Qualifications:</strong></p> <div class="has-nudge" data-nudge-id="4fc802f3-c29f-4c3f-ad33-565968297a0c"> <ul> <li>Securi

About The New York Times

The New York Times produces journalism for readers in Manhattan and around the world. The team reports, edits, and designs news, opinion, and reviews across print and digital platforms. Roles here support this work, from product and engineering to audience and operations. You collaborate with diverse specialists to reach readers and sustain in-depth coverage.

About the location

The posting places this role in New York, NY; Remote

USA. Local hiring markets vary in interview pace and compensation bands. Location copy is here so readers understand the geography attached to the title.