Engineering Manager, Cybersecurity

About the role

The mission of The New York Times is to seek the truth and help people understand the world. This role is part of the Information Security department, which helps prevent The Times from becoming news by protecting journalists, colleagues, platforms, and readers.

Responsibilities

• Lead and grow a Security Engineering team responsible for building and operating core security platforms, including centralized vulnerability management, secrets management, secure CI/CD guardrails, and logging and detection infrastructure.
• Collaborate with Cybersecurity leadership and technical stakeholders across the organization to define the vision, direction, and strategy for the Security Engineering function.
• Own your team's execution and delivery, from roadmap definition through implementation, rollout, and ongoing operations for security services used by engineers across The New York Times.
• Create an environment that favors context over control, empowering engineering teams with the information, patterns, and tooling they need to build and ship secure products and services.
• Partner with Developer Platforms, Enterprise Technology, and Product Engineering teams to design secure-by-default platforms and guardrails that balance security, usability, and performance.
• Establish and improve processes for vulnerability intake, triage, remediation workflows, and reporting that make security risks visible, measurable, and actionable for both engineering teams and leadership.
• Develop and mentor engineers at all levels by providing regular feedback, coaching, and opportunities for growth while helping them set and achieve meaningful career goals.
• Foster a healthy, inclusive team culture built on trust, sustainable engineering practices, and work that is visible, prioritized, and manageable.
• Contribute to department-wide initiatives, including incident response, audit support, and cross-functional working groups focused on a variety of security and engineering topics.
• Champion our values by supporting journalistic independence and demonstrating a strong commitment to The New York Times' mission to seek the truth and help people understand the world.

Qualifications

• 3–5+ years of experience leading engineers as a people manager or tech lead in security engineering, platform engineering, SRE, DevOps, or a related field.
• Hands-on experience in security engineering and/or infrastructure/platform engineering is required.
• Practical experience with modern software delivery practices, such as CI/CD pipelines, infrastructure as code, and container orchestration (e.g., Kubernetes, ECS).
• A strong understanding of security controls across key domains, such as identity and access management, encryption, vulnerability management, network security and authentication.
• Demonstrated ability to partner with engineering teams to solve complex problems, balancing long-term security posture with near-term delivery needs.
• Proven track record of hiring, developing and retaining engineers from diverse backgrounds, and building teams where people do their best work.
• Excellent communication skills, including the ability to explain complex technical topics to non-specialist audiences and to influence stakeholders at multiple levels.