Equal Opportunity Employer
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, protected veteran status, or disability status. EEO/AA/M/F/Disabled/Vets
Job Description :
Job Description
Product Security Engineer
Location: NYC - 3 days a week in office
Job Description:
We have an exciting role for a Product Security Engineer who will be responsible for the design,
development, and strategy to secure digital products within NewsCorp supporting the NY POST.
The successful applicant will contribute expertise, embrace emerging trends, and provide overall guidance on
security best practices across all of News Corp businesses and technology groups. The
successful candidate will possess excellent interpersonal and communication skills required to
partner with other leaders across the global business to identify opportunities and risks. The
position will require the ability to multitask and work independently, as well as work
collaboratively with teams, some of which may be geographically distributed.
Key responsibilities include:
- Build, maintain and execute a strategy to secure our application ecosystem
- Provide technical consultation and direction on secure application design, architecture and
system security
- Perform security reviews, code reviews and threat models of our products; identify any security
issues and develop guidance and plans to remediate
- Work with software engineers to design preventative and/or detective controls for specific
security issues
- Partner with engineering teams to build reusable security components
- Facilitate penetration tests and code reviews for applications (web/mobile)
- Validate and triage vulnerabilities submitted by researchers from the News Corp bug bounty
program
- Identify security risks and exposures, determine the causes of security violations and suggests
procedures to prevent future incidents
- Help proliferate the use of automated security tools into development workflows to identify
security issues quickly
- Participate in teaching secure development practices to software engineers
Qualifications and Skills:
Degree in Technology, Computer Science/Engineering, Cybersecurity, a related field or
equivalent experience
Demonstrated experience in one or more of the following languages/frameworks: Node.js, PHP,
Java, and/or Python
Knowledge of OWASP TOP 10 and CWE Top 25 and how to mitigate them and can explain how
to resolve the issues to developers.
Proficient in cloud best practices and security - AWS, GCP and AzureExperience with Static and Software Composition Analysis tools such as Checkmarx and their
implementation within CICD build pipelines.
Familiar with container technologies (Docker/Kubernetes etc) and use of cloud servicesExpertise on modern web and mobile application security practices and trendsDev tools experience (Github, Terraform, CircleCI, Jenkins, etc.)Working knowledge of common and industry standard cloud-native/cloud-friendly authentication mechanisms (OAuth, OpenID, AWS IAM etc)Excellent communication and presentation skills. Ability to effectively communicate, both orally
and in writing, through all levels of the organization
Any additional training, security certifications, or history of responsible disclosure is preferred
but not required
Location: NYC - 3 days a week in office
News Corp is a global diversified media and information services company focused on creating
and distributing authoritative and engaging content to consumers throughout the world. The
company comprises businesses across a range of media, including: news and information
services, book publishing, digital real estate services, cable network programming in Australia,
and pay-tv distribution in Australia.
Headquartered in New York, the activities of News Corp are conducted primarily in the United
States, Australia, and the United Kingdom.
Job Category:
Pay Range: 80,000 - 100,000
We recognize that attracting the best talent is key to our strategy and success as a company. As a result, we aim for flexibility in structuring competitive compensation offers to ensure we are able to attract the best candidates. The quoted salary range represents our good faith estimate as to what our ideal candidates are likely to expect, and we tailor our offers within the range based on the selected candidate's experience, industry knowledge, location, technical and communication skills, and other factors that may prove relevant during the interview process.
Pay-for-performance is a key element in our strategy to attract, engage, and motivate talented people to do their best work. Similarly to salary, for bonus eligible roles, targets are set based on a variety of factors including competitive market practice.
For benefits eligible roles, in addition to cash compensation, the company provides a comprehensive and highly competitive benefits package, with a variety of physical health, retirement and savings, caregiving, emotional wellbeing, transportation, and other benefits, including "elective" benefits employees may select to best fit the needs and personal situations of our diverse workforce.
