3 hours ago
Remote, United StatesSenior
Base Salary
$125k - $152k/yr
Responsibilities
- Implement and own secure-by-design frameworks across cloud, infrastructure, and application ecosystems.
- Review and approve security architectures for internal systems, cloud platforms, and third-party integrations.
- Design and maintain automated DevSecOps pipelines that scan Git repositories for vulnerabilities.
- Manage security lifecycles and compliance across AWS and GCP environments.
- Own the enterprise vulnerability management program and prioritize remediation efforts.
- Assess and secure emerging technologies, including generative AI tools, LLMs, and AI workflows.
- Develop Splunk dashboards, queries, alerts, and automated reporting for security monitoring and threat intelligence.
- Deploy and evaluate EDR, anti-malware, antivirus, and Cisco network perimeter controls.
- Partner with technology and business teams to address security gaps and support remediation.
Requirements
- At least 5 years of experience in information security, security engineering, or infrastructure security.
- At least 2 years of hands-on experience with DevSecOps, secure software development, or automated CI/CD security pipeline integration.
- Hands-on experience administering SIEM, EDR or anti-malware, and vulnerability management tools.
- Experience securing multi-cloud environments, including AWS and/or GCP, and understanding of cloud security posture management.
- Knowledge of networking concepts and securing perimeter devices such as Cisco hardware.
- Experience with technical communication, documentation, and assisting development teams with security remediation.
- Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or equivalent work experience.
- Preferred certifications include CISSP, GIAC, or specialized cloud and DevSecOps credentials, or equivalent practical experience.
- Experience with Infrastructure as Code, network automation tools, and secure generative AI or LLM workflows is preferred.
- Ability to write Python or Bash utility scripts, analyze vulnerability scans, design cloud security architectures, and build Splunk queries and alerts.
Benefits
- Remote-permitted within an NPR-supported United States location, with options for on-site or hybrid work at an NPR facility.
- Full-time exempt position based out of Washington, D.C., with occasional travel expected.
- Eligible regular full-time employees working 30 or more hours per week can enroll in benefits.
- Benefits include medical, dental, vision, life and accidental death and dismemberment, long-term disability, short-term disability, paid time off, wellness resources, and voluntary retirement savings.
Tech Stack
Categories
About NPR
NPR is a nonprofit media organization that produces and distributes news, talk, and cultural programming across radio, podcasts, and digital platforms for U.S. and global audiences. It operates a nationwide network in partnership with hundreds of independent public radio member stations, and offers products including flagship shows, on-demand podcasts, and the NPR mobile app and website. Founded in 1970 and headquartered in Washington, DC, it is funded by station dues, underwriting/sponsorship, grants, and listener contributions.