Senior Security Engineer

Remote: yes Posted: 2026-10-26

The big picture: Axios is a respected media company dedicated to providing trustworthy, award-winning news content in an audience-first format known as Smart Brevity™. We are looking for a Senior Security Engineer with strong cloud infrastructure and AI security experience to lead our defensive posture, drive threat modeling and vulnerability management, and embed security controls - including AI-driven defense and monitoring - across our platform and automation pipelines.

Why it matters: As a Senior Security Engineer at Axios, you will architect and implement proactive security strategies to protect our audience, platform, and data assets against evolving threat vectors, including AI-driven attacks. In this role, you will define our security roadmap, leverage internal and third-party AI defense tools, and ensure our cloud systems remain resilient, secure by default, and capable of automated threat detection and response.

- Lead the architectural design and implementation of security controls across cloud infrastructure, platform services, and AI integrations.

- Drive vulnerability management, threat modeling, incident response, and proactive security assessments across AWS, Kubernetes, and AI application environments.

- Shape, maintain, and execute the company’s long-term security roadmap in close alignment with engineering and executive leadership.

- Embed automated security testing, SAST/DAST, and AI-driven compliance checks directly into CI/CD pipelines and infrastructure-as-code workflows.

- Oversee identity and access management (IAM), secrets management, encryption protocols, and zero-trust architecture standards.

- Evaluate, deploy, and maintain internal AI security tools and modern third-party defensive solutions to detect, mitigate, and respond to AI-driven threats and sophisticated attack vectors in real time.

- Promote a strong security culture across engineering by conducting threat modeling workshops and coaching teams on secure coding and infrastructure practices.

- Partner with product, infrastructure, data, and QE teams to ensure security is integrated seamlessly into every stage of the development lifecycle.