Security Engineer

Hearst Communications • Lawrenceville, GA

75d

About The Position

In this role, you will drive vulnerability management and compliance with standards such as SOC 2, ISO, and NIST. You will be responsible for securing and automating our CI/CD pipelines and Infrastructure-as-Code using tools like Pulumi, Helm, and Python. Additionally, you will protect our AWS cloud and containerized environments, including Docker and Kubernetes. Monitoring systems, responding to threats, and leading incident resolution will be key aspects of your responsibilities. You will also partner with developers to integrate Application Security (AppSec) practices, such as SAST/DAST and dependency scanning, into workflows. Mentoring peers and fostering a culture of security awareness will be essential to your success.

Requirements

• 3+ years in security engineering, cloud, or DevSecOps
• Strong AWS experience (Azure/GCP a plus)
• Knowledge of IaC, CI/CD, and cloud-native security tools
• Familiarity with SIEM, EDR/XDR, WAFs, and OWASP Top 10
• Excellent communicator who thrives in cross-functional teams
• US-based (or eligible to work in the U.S.)

Nice To Haves

• Experience with Wiz, NopSec, Kubernetes security
• Security certifications (CISSP, AWS Security Specialty, etc.)

Responsibilities

• Drive vulnerability management and compliance (SOC 2, ISO, NIST)
• Secure and automate CI/CD pipelines and Infrastructure-as-Code (Pulumi, Helm, Python, etc.)
• Protect AWS cloud and containerized environments (Docker/Kubernetes)
• Monitor systems, respond to threats, and lead incident resolution
• Partner with developers to integrate AppSec (SAST/DAST, dependency scanning) into workflows
• Mentor peers and foster a culture of security awareness

Benefits

• Competitive pay + 401(k) match
• Comprehensive health, dental, vision, life, and disability insurance
• Generous PTO, parental leave, and wellness reimbursement
• Hybrid flexibility + inclusive, growth-focused culture
• Backed by Hearst: stability with startup-like agility

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Web Search Portals, Libraries, Archives, and Other Information Services
• Number of Employees: 5,001-10,000 employees