The New York Times
Senior DevSecOps Engineer, Cybersecurity
$140K–$160K
New York, NY · Senior · Full-time · Posted Oct 8, 2026
- Experience
- 5+ years of experience in software engineering and security engineering.
About the job
Designs, builds, and operates security controls and services to protect The New York Times’ systems, data, and users, while integrating security into engineering workflows and reducing risk.
What you'll do
- Design, implement, and operate security controls and services, including identity and access management, secrets management, hardening, detection, and response automation.
- Partner with product and platform teams on secure architecture and workflows; perform security reviews, threat modeling, and risk assessments.
- Investigate complex security issues, drive changes to prevent recurrence, and share security practices across teams.
What they ask for
- Understanding of security controls across domains including access management, encryption, vulnerability management, AI security, network security, and authentication/authorization.
- Knowledge of one or more cloud platforms (AWS, GCP) and secure architecture practices.
- Experience with software engineering practices such as CI/CD, GitOps, and IaC, and related security practices.
- Programming skills in at least one language (Go, Python); experience with containerization and orchestration platforms.
Nice to have
- Security/Compliance or DevOps certifications; experience with Kubernetes.
- Experience with Terraform, Packer, or HashCorp Vault.
Pay
$140,000 — $160,000 USD (base salary)
Tools
AWS, GCP, Go, Python, Kubernetes, Terraform, Packer, HashCorp Vault
AI focus
Security controls include AI security.
Model-written summary · the original posting is authoritative