The Associated Press is an independent global news organization dedicated to factual reporting. Founded in 1846, AP today remains the most trusted source of fast, accurate, unbiased news in all formats and the essential provider of the technology and services vital to the news business. More than half the world's population sees AP journalism every day.

Position Summary: Support fact-based journalism by safeguarding AP's infrastructure, systems, and applications. This role involves designing, implementing, and operating security tools and processes. You will collaborate with engineering, infrastructure, and product teams to ensure our cloud-based environment is secure, resilient, and aligned with modern cybersecurity practices.

Key Responsibilities:

Security Tools & Technologies: Research, design, and implement cybersecurity solutions that align with organizational needs and evolving threats. Identify opportunities to automate, maintain, and integrate security tools. Design & Architecture: Partner with engineering, infrastructure, and DevOps teams to ensure secure-by-default design, deployment, and operation in cloud-based products. Collaboration: Work closely with IT and other stakeholders to integrate security controls and practices. Cloud Security: Define and enforce security guardrails for multi-cloud environments, focusing on infrastructure-as-code, logging, and misconfiguration detection. Detection Engineering: Onboard and maintain log sources in the SIEM. Develop detection logic to identify anomalous activity and emerging threats. Incident Response: Investigate, contain, eradicate, and recover from security events as needed. User Awareness: Handle user security inquiries and provide targeted training for staff with specific security needs. Threat Intelligence: Monitor cybersecurity trends and technologies to proactively address potential risks. Basic Qualifications: 3+ years of hands-on experience in cybersecurity roles Proficiency with at least one major cloud platform (AWS, Azure, or GCP) Experience with scripting languages (Python, Bash, or PowerShell) Experience with enterprise security tools (EDR, SIEM, CSPM, WAF) Strong analytical and problem-solving skills, with the ability to prioritize multiple tasks Excellent verbal and written communication skills, including the ability to convey technical risks to technical and non-technical audiences What Will Set You Apart: Industry certifications (CISSP, GIAC, OSCP, or cloud provider-specific credentials such as AWS Security Specialty) Experience in server administration, cloud operations, site reliability, networking, or related roles Experience with Microsoft 365 security products (Defender, Purview, Intune, SCCM, Entra ID) Degree in Computer Science, Cybersecurity, or related field-or equivalent real-world experience Understanding of Infrastructure as Code (IaC), CI/CD workflows, and DevSecOps practices Experience working in mission-driven organizations, non-profits, or the media/news industry

The anticipated salary range for this position is $100,000 - $120,000, contingent on experience and other job-related factors. Employees are eligible to participate in a 401(k) plan and an employer-sponsored health insurance plan, as outlined in the official plan documents. Additionally, they are eligible for paid time off and holidays per AP policy.

This is a remote position located within the United States.

The application period will expire at 11:59pm on August 2 8 , 2025.

AP seeks to build an inclusive organization grounded in respect for differences. We support all aspects of diversity and provide equal employment opportunities to all employees and applicants without regard to race, color, religion, sex, marital status, national origin, age, sexual orientation, gender identity, disability, status as a veteran, or other characteristic protected by law.