Senior Engineer, Cybersecurity

New York, NY · USD 140,000-160,000 / year · 5+ years experience · Hybrid · Posted Oct 8, 2026

At a glance

The Senior Engineer, Cybersecurity is a hands-on contributor who designs, builds, and operates security controls and services that protect The Times' systems, data, and users.
As a member of the Security Architecture team, you will own complex initiatives end-to-end, drive measurable risk reduction, and collaborate across product engineering and enterprise technology.

Create an environment that favors context, not control.
Empower product engineers and ensure they have the relevant information and tools to deliver secure products and services.
Design, implement, and operate security controls and services that meet reliability, security, scalability, and observability standards.
Partner with product and platform teams to integrate security into architecture and developer workflows while articulating business impact and tradeoffs.
Perform security reviews, threat modeling, and risk assessments.
Investigate and resolve urgent and/or complex security issues, triaging effectively and driving architectural changes that prevent recurrence.
Participate via RFCs, community of practices, and other internal knowledge sharing channels to share learnings, align on standards, and influence secure patterns across areas.
Support team growth through peer design/code review, pairing, and clear feedback on security engineering practices across the department.
Demonstrate support and understanding of our value of journalistic independence and a commitment to our mission to seek the truth and help people understand the world.

5+ years of experience in software engineering and security engineering space.
Understanding of security controls across a variety of security domains, including access management, encryption, vulnerability management, AI security, network security, authentication/authorization.
Knowledge of one or more Cloud platforms (AWS, GCP) and best practices for architecting and securing.
Experience with software engineering practices and related security practices.
Programming skills in at least one language (Go, Python).
Experience with containerization and orchestration platforms.

Show all 13 skills