Senior Security Engineer – D.C. – Hybrid – Renowned Publication

Senior Security Engineer – D.C. – Hybrid – Opportunity to work for a Renowned Publication!

One of the US’s most prestigious magazines, with roots tracing back to the 1800’s, are currently searching for an experienced Senior Security Engineer!

The prestigious American magazine and multi-platform publisher covers politics, foreign affairs, business, culture, technology, and science.

This is an excellent opportunity for an experienced Security Engineer with a background in Dev Ops and IAM to take the next step into a challenging position with a stable, well-known American institution!

They have influenced national discourse on business, foreign policy, politics, and cultural trends for almost 150 years.

They and their writers have collected several prizes and awards for their work.

They have over 350 employees, over one million subscribers, and growing!

• Partner with engineering teams to architect applications with security and data protection built in from the start, including zero trust networking and secure data access controls
• Review architecture diagrams, code, and proposals to spot security issues before they ship
• Secure agentic and LLM-driven workflows to prevent over-access, data exfiltration, and backdoors
• Work with Operations to stand up and tune WAFs and IAM
• Develop tooling that makes it easier to secure our applications and company data
• Triage security incidents, identify root causes, and build solutions that prevent recurrence
• Participate in on-call rotation (outside of standard business hours) to monitor, troubleshoot, and resolve production incidents, ensuring system reliability and uptime.
• Contribute to general Dev Ops and backend engineering across company-wide architecture

• Several years of software engineering experience, with significant hands‑on work in security engineering
• Strong backend programming ability and comfort with general Dev Ops work (CI/CD, infrastructure‑as‑code, cloud platforms)
• Deep understanding of secure software design and modern application security practices, including zero trust principles
• Hands‑on experience with IAM, WAFs, and secure data access controls
• A track record of owning security incidents end to end — triage, root cause, and durable fixes

• Experience securing agentic and LLM‑driven workflows against over‑access, data exfiltration, and backdoors
• Experience developing security tooling and automation
• Familiarity with major cloud providers (AWS, GCP, or Azure) and an infrastructure‑as‑code tool (Terraform or similar)
• Background in consumer‑facing web or mobile products
• Experience using observability and monitoring tools (Datadog, Sentry) as security and quality signals in production
• Familiarity with threat modeling and secure‑by‑design architecture