Cybersecurity Engineer

The Cybersecurity Engineer at Los Angeles Times is responsible for implementing, maintaining, and supporting cybersecurity technologies and processes to safeguard systems, networks, applications, and data. This role supports security operations, vulnerability management, incident response, and security compliance for digital publishing platforms, newsroom systems, and corporate technology, with work performed remotely.

Key Responsibilities

• Monitor security tools and platforms to identify threats, vulnerabilities, and suspicious activity.
• Investigate security alerts and assist with incident response activities.
• Support implementation and maintenance of security technologies across the enterprise to ensure tools operate effectively, gaps are identified promptly, and issues are escalated with clear supporting information.
• Perform security reviews and system health checks, document findings, and track follow-up actions to maintain a consistent security baseline.
• Conduct vulnerability scans and support security risk assessment.
• Track and coordinate remediation activities with technology teams, ensuring fixes are completed within defined SLA windows and remediation status is documented for reporting and audit purposes.
• Validate security fixes and contribute to ongoing risk reduction efforts.
• Assist with penetration testing activities and related remediation initiatives.
• Administer identity and access management processes, including account provisioning and privileged access controls, ensuring access rights are accurate, timely, and compliant with organizational policy.
• Assist in maintaining endpoint security, network security, and cloud security controls.
• Configure and manage security tools in alignment with organizational standards.
• Support implementation of security policies and technical safeguards.
• Assist in investigating security incidents, documenting findings, and collecting and analyzing system and security logs during investigations.
• Support incident containment, recovery, and remediation efforts to minimize operational impact and restore secure, stable operations efficiently.
• Escalate significant threats and vulnerabilities to senior security personnel.
• Maintain accurate and current security documentation, procedures, and operational records to support audit readiness, consistent security operations, and team knowledge continuity.
• Support compliance audits, assessments, and security reviews by producing timely, accurate data and documentation aligned with applicable security frameworks.
• Contribute to security awareness initiatives and technical training efforts to strengthen the organization’s security culture and reduce enterprise risk.
• Collaborate with IT, Engineering, and business teams to support secure technology operations and improve operational security control effectiveness.
• Participate in projects requiring security reviews or implementation support.
• Perform other duties as assigned.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field, plus either 3+ years of experience in cybersecurity, information security, systems administration, network administration, or a related technical role, or 5+ years of experience in the same areas.
• Experience supporting enterprise security technologies and security operations processes.
• Knowledge of network security, endpoint security, identity management, and cybersecurity best practices.
• Hands-on experience with security monitoring tools, vulnerability scanning solutions, and endpoint protection technologies.
• Experience with identity and access management (IAM) platforms and privileged access management processes.
• Hands-on experience configuring and managing enterprise security tools.
• Knowledge of incident response frameworks and procedures.
• Proven ability to maintain accurate technical documentation and standard operating procedures.
• Familiarity with cloud security concepts and modern technology environments.
• Understanding of security frameworks and regulatory requirements.
• Strong analytical, troubleshooting, and problem-solving abilities.
• Excellent organizational and communication skills.
• Ability to work independently and collaboratively within a team environment.
• Strong attention to detail and commitment to maintaining security standards.

Preferred Qualifications

• Security certifications such as Security+, CySA+, SSCP, GSEC, or equivalent.
• Experience supporting digital media, publishing, or online content platforms.
• Familiarity with scripting, automation, or AI-enabled security tools used to improve operational efficiency and threat detection capabilities.

Role Details

• Location: Remote
• Salary: USD 125,000 - 140,000 per year
• Minimum Experience: 3 years
• Education: Bachelor’s degree