Security Engineer (L5) - Application and Infrastructure Security
At Netflix we do one thing - entertainment - and we aim to do it really well. To accomplish this goal, we must produce, distribute, and stream content at a massive scale. We have a strong engineering organization that enables us to achieve these business objectives and a unique and creative culture that guides us to operate with “Freedom and Responsibility”. This helps keep engineering velocity high, but also means that our security team needs to operate differently than a traditional security team. Employees have tremendous freedom in their work, along with the corresponding responsibility to do the right thing for Netflix. Instead of controlling engineers with process and security gates, we enable them to build secure code and provide them with adequate security context to make the right decisions for Netflix.The Application and Infrastructure Security (AIS) team aims to reduce risk in our engineering ecosystem through strategic security initiatives in high-risk or high-leverage areas. We conduct risk discovery, security strategy development and execution, identification and execution of high impact security initiatives across Netflix applications and infrastructure (e.g. network security strategy for corporate infrastructure, Secure Application Gateway for all internal applications). We are looking for a Security Engineer to join the team to work closely with our infrastructure, platform, and network engineering teams to help evolve our security strategy in these areas to meet dynamic business demands. You will partner closely with engineering teams and other security functions to improve security at Netflix.Desired BackgroundWe are looking for a thoughtful security professional who enables our mission and supports our culture of freedom and responsibility. We encourage you to apply even if you don't meet every single one of the listed criteria. We value the unique perspectives, skills, and experiences each candidate brings with them.
Execution, Collaboration, Influence, and Decision Making
- Experience with an engineering-focused approach to infrastructure and platform security.
- Demonstrated skill and judgment in prioritizing, influencing, and driving remediation and risk reduction strategies at scale through complex organizations.
- Strong written and verbal communication skills, and an ability to articulate security objectives to a variety of audiences.
- Can build understanding and develop sound security strategies amidst ambiguity.
- Comfortable both driving broad initiatives and digging deep in technical domains.
Security Domain Expertise
- Security architecture, threat modeling, secure design.
- Experience conducting security assessments and developing remediation strategies.
- Operating systems security, e.g. hardening, patch and vulnerability management, access management, monitoring.
- Securing platform and developer infrastructure.
- Core network security concepts, e.g. zero trust architecture.