Senior Security Engineer

Axios is a respected media company dedicated to providing trustworthy, award-winning news content in an audience-first format known as Smart Brevity. We are looking for a Senior Security Engineer with strong cloud infrastructure and AI security experience to lead our defensive posture, drive threat modeling and vulnerability management, and embed security controls - including AI-driven defense and monitoring - across our platform and automation pipelines.

Responsibilities

Lead the architectural design and implementation of security controls across cloud infrastructure, platform services, and AI integrations; Drive vulnerability management, threat modeling, incident response, and proactive security assessments across AWS, Kubernetes, and AI application environments; Shape, maintain, and execute the company's long-term security roadmap in close alignment with engineering and executive leadership; Embed automated security testing, SAST/DAST, and AI-driven compliance checks directly into CI/CD pipelines and infrastructure-as-code workflows; Oversee identity and access management (IAM), secrets management, encryption protocols, and zero-trust architecture standards; Evaluate, deploy, and maintain internal AI security tools and modern third-party defensive solutions to detect, mitigate, and respond to AI-driven threats and sophisticated attack vectors in real time; Promote a strong security culture across engineering by conducting threat modeling workshops and coaching teams on secure coding and infrastructure practices; Partner with product, infrastructure, data, and QE teams to ensure security is integrated seamlessly into every stage of the development lifecycle

Requirements

Deep expertise in cloud and application security, including threat modeling, vulnerability scanning, penetration testing, IAM, secrets management, AI security, and compliance frameworks; Strong working knowledge of AWS infrastructure and security controls (IAM, KMS, EKS, RDS, S3); Experience hardening Kubernetes clusters, runtime security, container scanning, and network policy enforcement; Proficiency in integrating SAST/DAST and security automation into CI/CD pipelines (GitHub Actions); Solid scripting or programming skills in Python, Go, or Bash for security tooling and automated remediation; Hands-on experience with SIEM, security logging, automated threat intelligence, and AI-powered monitoring frameworks (Prometheus, Grafana, Loki, or modern SOC tooling); Demonstrated leadership in driving security initiatives, defining policy, and guiding engineering teams on security risk; Exceptional communication and stakeholder management skills, with the ability to effectively balance security requirements and business agility

Benefits

401(k) with employer match; Robust PPO and High Deductible health insurance options on the Blue Cross Blue Shield network; Employer Health Savings Account (HSA) contribution for the high deductible health plan option; Dental and vision coverage; Primary caregiver 12-week paid leave; Birth-givers will have an additional 6-8 weeks depending on type of delivery, for a total of 18-20 weeks continuous leave; Generous vacation policy, plus holidays; One mental health day per quarter; Annual learning and development stipend; $100 monthly work-from-home stipend; Tele-mental health services through Headspace; OneMedical membership, including tele-health services; Personal health advocacy resources through HealthAdvocate; Inclusive fertility, hormonal health and family forming benefits through Carrot Fertility; Access to the Axios Employee Support Fund; Increased work flexibility for parents and caretakers; Virtual company-sponsored social events; A strong and positive work environment; A commitment to an open, inclusive, and diverse work culture