NPR - Senior IT Security Engineer
Requirements
• 5+ years of experience in an information security, security engineering, or infrastructure security role. • 2+ years of hands-on experience in DevSecOps, secure software development, or automated CI/CD security pipeline integration. • Strong hands-on technical experience administering enterprise security tools, including SIEM (Splunk), EDR/anti-malware, and vulnerability management systems. • Proven experience securing multi-cloud environments (AWS and/or GCP) and a solid understanding of cloud security posture management. • Practical knowledge of core networking concepts and principles, including securing perimeter devices (such as Cisco hardware). • Demonstrated track record of cross-functional technical communication, documentation, and assisting development teams with security remediation. • Industry certifications such as CISSP, GIAC, or specialized cloud/DevSecOps credentials (or equivalent practical experience). • Experience with Infrastructure as Code (IaC) and network automation tools. • Practical experience implementing secure workflows for generative AI tools or LLMs. • Threat & Vulnerability Analysis: Analytical capability to interpret automated scan results, prioritize vulnerabilities, and formulate remediation plans. • Threat & Vulnerability Analysis: • Cloud Security Architecture: Foundational competence in designing and securing cloud-native services and environments. • Cloud Security Architecture: • Automation & Scripting: Ability to write utility scripts (Python, Bash, etc.) to automate security checks or integrate tools. • Automation & Scripting: • SIEM Querying: Proficiency in building custom queries and alerts within SIEM platforms like Splunk. • SIEM Querying: • Collaborative Problem Solving: Exceptional interpersonal and technical communication skills to bridge security policies with developer workflows. • Collaborative Problem Solving: • Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or equivalent work experience. • NPR Remote-Permitted: This is a remote-permitted role. This role is based out of our Washington, D.C. office, but the employee may choose to work on a remote basis from a location that NPR approves. You will have the option of working (a) remotely from a location of your choosing within the United States that is supported by NPR; (b) on-site at an NPR facility, based on the availability of desks and approval from NPR; or (c) a combination of both. Regardless of where you choose to work from, you may be expected to travel to other locations from time to time to perform the duties of your position. • NPR Remote-Permitted • Job Type • Job Type • This is a full-time, exempt position.
Responsibilities
• Secure-by-Design Architecture: Implement, own, and champion secure-by-design frameworks across cloud, infrastructure, and application ecosystems, ensuring all system architectures address robust cybersecurity requirements. • Secure-by-Design Architecture: • Design & Integration Reviews: Review and approve security architecture designs for new internal systems, cloud platforms, and third-party integrations. • Design & Integration Reviews: • DevSecOps & CI/CD Pipelines: Design, enable, and maintain automated security pipelines to proactively scan Git repositories, catching vulnerabilities early in the software development lifecycle. • DevSecOps & CI/CD Pipelines: • Cloud Security Management: Manage security lifecycles within multi-cloud environments (primarily AWS and GCP) to ensure continuous compliance and threat mitigation. • Cloud Security Management: • Vulnerability Management: Own and run the end-to-end vulnerability management program, prioritizing remediation efforts across enterprise systems. • Vulnerability Management: • AI & Emerging Tech Security: Assess and secure emerging technologies, evaluating security-focused Large Language Models (LLMs) and AI workflows to keep NPR aligned with industry progressions. • AI & Emerging Tech Security: • Security Monitoring & SIEM: Leverage SIEM platforms (specifically Splunk) to develop advanced dashboards, write queries, and build automated reporting mechanisms for real-time threat intelligence. • Security Monitoring & SIEM: • Network & Endpoint Defense: Deploy, recommend, and test advanced security controls, including Endpoint Detection and Response (EDR), enterprise-level antivirus, and perimeter security for Cisco networking devices. • Network & Endpoint Defense: • Cross-Functional Collaboration: Partner with internal NPR technology and business teams to address security gaps, resolve concerns, and provide subject matter expertise in ongoing cybersecurity meetings. • Cross-Functional Collaboration: • The above duties and responsibilities are not an exhaustive list of required responsibilities, duties and skills. Other duties may be assigned, and this job description can be modified at any time.
Benefits
• Salary Range: The U.S.-based anticipated salary range for this opportunity is $125,000 - $152,000 plus benefits. The range displayed reflects the minimum and maximum salaries NPR expects to provide for new hires for the position across all US locations. • NPR Benefits: NPR provides comprehensive benefits for employees and dependents. Regular, full-time employees scheduled to work 30 hours or more per week are eligible to enroll in NPR’s benefits options. Benefits include access to health and wellness, paid time off, and financial well-being. Plan options include medical, dental, vision, life/ accidental death and dismemberment, long-term disability, short-term disability, and voluntary retirement savings to all eligible NPR employees. • Does this sound like you? If so, we want to hear from you. • The range displayed reflects the minimum and maximum salaries NPR expects to provide for new hires for the position across all US locations. • $125,000—$152,000 USD
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT