Skip to main content
CareerApp

Senior Engineer

The Atlantic

Washington, DC · full time · Senior

$115,000 – $140,000

Listed on The Atlantic’s own careers site. You apply with them directly — we never stand between you and the employer.

What this role is

The Atlantic seeks a hands-on security engineer to protect their journalism platform and reader data by designing secure systems, reviewing code and architecture for vulnerabilities, and responding to incidents. This role is ideal for someone who combines backend and infrastructure expertise with security focus and wants to ship trustworthy products for a mission-driven organization.

Our summary, not The Atlantic’s wording. The full posting is on their site.

What they ask for

Required

  • 5+ years of software engineering experience with significant hands-on security engineering work
  • Strong backend programming ability and general DevOps work (CI/CD, infrastructure-as-code, cloud platforms)
  • Deep understanding of secure software design and modern application security practices including zero trust principles
  • Hands-on experience with IAM, WAFs, and secure data access controls
  • Track record of owning security incidents end-to-end from triage through root cause to durable fixes

Nice to have

  • Experience securing agentic and LLM-driven workflows against over-access, data exfiltration, and backdoors
  • Experience developing security tooling and automation
  • Familiarity with major cloud providers (AWS, GCP, Azure) and infrastructure-as-code tools like Terraform
  • Background in consumer-facing web or mobile products
  • Experience using observability and monitoring tools (Datadog, Sentry) as security and quality signals
  • Familiarity with threat modeling and secure-by-design architecture

Turn on analytics and we load Google Analytics: Google gets the pages you open and what you do here — searches, jobs you view, jobs you apply to — and sets its own cookies. Leave it off and the only cookies we set are your login, your theme, and this answer. Accept All also records a yes to advertising, which nothing uses yet. Privacy Policy.