[Hiring] Security Engineer @Netflix

Role Description

At Netflix, our mission is to entertain the world. Together, we are writing the next episode - pushing the boundaries of storytelling, global fandom and making the unimaginable a reality. We are a dream team obsessed with the uncomfortable excitement of discovering what happens when you merge creativity, intuition and cutting-edge technology. Come be a part of what’s next.

Netflix operates our streaming service control plane on Amazon Web Services, which has led to one of the largest and most sophisticated AWS environments in the world. Cloud Security for our public cloud deployments is critical to Netflix’s security posture to protect our members, partners, employees, and intellectual property. Of this charter, the Cloud Architecture, Tooling and Security (CATS) team designs and implements strategic high-level cloud security boundaries to balance risk while enabling business needs.

We are looking for a cloud security engineer to join this team to serve as a critical partner in securely enabling new Netflix business verticals, supporting innovation and experimentation, and integrating new acquisitions. This role is highly collaborative, focusing on:

• Designing and implementing secure cloud access patterns
• Cloud security boundaries
• New paved paths, primarily involving Identity and Access Management (IAM) challenges in AWS and GCP

While not a dedicated software development role, the ability to build scrappy tooling/scripting and data analysis tools is required for success in this Security Engineer role.

You will collaborate with software engineering teams to:

• Understand business needs
• Design and implement appropriate, scalable cloud security solutions
• Design and implement new cloud security strategies and archetypes
• Discover, self-serve, right-size, and manage cloud resources
• Develop internal tooling and scripting for GCP

Furthermore, you will:

• Perform threat assessments
• Apply knowledge of AWS architecture and new AWS services to address security requests
• Contribute to operational excellence by reducing risks and eliminating tedious access management minutiae

Qualifications

• A broad and deep understanding of cloud security fundamentals, with a particular focus on CloudSec operations, AWS account management and Security Architecture
• GCP expertise is a must, specifically the ability to architect and implement organization-wide security guardrails and identity governance
• Comfortable defining secure-by-default blueprints for GCP project lifecycles and service account management
• Experience collaborating with product and engineering teams to design security solutions
• Strong verbal and written communication skills for conveying complex technical issues cross-functionally
• A pragmatic approach to security, engaging transparently with the nuances and tradeoffs of security risk
• Proven ability to identify high-leverage work and drive it independently without explicit direction
• Experience securing challenging 3rd-party cloud infrastructure access patterns, such as vendor integrations
• Experience defining insightful and meaningful metrics to gauge and guide cloud security posture or progress

Benefits

• Comprehensive Health Plans
• Mental Health support
• 401(k) Retirement Plan with employer match
• Stock Option Program
• Disability Programs
• Health Savings and Flexible Spending Accounts
• Family-forming benefits
• Life and Serious Injury Benefits
• Paid leave of absence programs
• Full-time hourly employees accrue 35 days annually for paid time off
• Full-time salaried employees are immediately entitled to flexible time off