• Create an environment that favors context, not control. • Empower product engineers and ensure they have the relevant information and tools to deliver secure products and services. • Design, implement, and operate security controls and services (e.g., identity and access management, secrets management, endpoint/agent hardening, network segmentation, detection, and response automation) that meet reliability, security, scalability, and observability standards. • Partner with product and platform teams to integrate security into architecture and developer workflows while articulating business impact and tradeoffs. • Perform security reviews, threat modeling, and risk assessments (code, design, 3rd-party apps). • Investigate and resolve urgent and/or complex security issues, triaging effectively and driving architectural changes that prevent recurrence. • Participate via RFCs, community of practices, and other internal knowledge sharing channels to share learnings, align on standards, and influence secure patterns across areas; model The Times' core values in cross-functional collaboration. • Support team growth through peer design/code review, pairing, and clear feedback.