← All roles

Senior Engineer, Cybersecurity

The New York Times· IS and Cyber Security
Apply on company site
New York, NY$140k - $160kFull-timePosted 1w ago

About the role

Hands-on cybersecurity engineer designing, building, and operating security controls and services to protect The Times’ systems, data, and users. Owns complex initiatives end-to-end within the Security Architecture team, aligning with business outcomes and collaborating across product engineering and enterprise technology.

Responsibilities

  • Create an environment that favors context, not control. Empower product engineers and ensure they have the relevant information and tools to deliver secure products and services.
  • Design, implement, and operate security controls and services (e.g., identity and access management, secrets management, endpoint/agent hardening, network segmentation, detection, and response automation) that meet reliability, security, scalability, and observability standards.
  • Partner with product and platform teams to integrate security into architecture and developer workflows while articulating business impact and tradeoffs.
  • Perform security reviews, threat modeling, and risk assessments (code, design, 3rd-party apps).
  • Investigate and resolve urgent and/or complex security issues, triaging effectively and driving architectural changes that prevent recurrence.
  • Participate via RFCs, community of practices, and other internal knowledge sharing channels to share learnings, align on standards, and influence secure patterns across areas; model The Times' core values in cross-functional collaboration.
  • Support team growth through peer design/code review, pairing, and clear feedback; on security engineering practices across the department.
  • Demonstrate support and understanding of our value of journalistic independence and a commitment to our mission to seek the truth and help people understand the world.

Qualifications

  • 5+ years of experience in software engineering and security engineering space.
  • Understanding of security controls across a variety of security domains, including access management, encryption, vulnerability management, AI security, network security, authentication/authorization.
  • Knowledge of one or more Cloud platforms (AWS, GCP) and best practices for architecting and securing.
  • Experience with software engineering practices (CI/CD, GitOps, IaC, etc.) and related security practices (SAST, SCA, secure by design, shift left, etc.).
  • Programming skills in at least one language (Go, Python).
  • Experience with containerization and orchestration platforms.
  • A bias towards helping people. Many teams will rely on you to help build their systems.

Skills

Required:Security reviewsThreat modelingIdentity and access managementSecrets managementNetwork segmentationDetection and response automationCI/CDIaC
Nice to have:Endpoint/agent hardeningGitOps

Benefits

  • Variable pay such as annual bonus and restricted stock (dependent on role).
  • Medical, dental and vision benefits; Flexible Spending Accounts; company-matching 401(k); employee stock purchase plan; paid vacation, paid sick days, paid parental leave; tuition reimbursement; professional development programs.
Last updated Oct 14, 2026. Interested? Apply on the company site.
The New York Times logo

About The New York Times

Breaking News, US News, World News and Videos

Live news, investigations, opinion, photos and video by the journalists of The New York Times from more than 150 countries around the world.

newslive updateslatest newsbreaking newslocal newscurrent eventstop storieslivestream
Company profileWebsite

More open roles at The New York Times