[Hiring] Security Software Engineer @Netflix

Role Description

We are looking for a Security Software Engineer to own protocol and foundational security for the OC edge appliances, with the opportunity to directly impact a critical area of the business.

• Design and build security primitives that are necessary for existing and innovative new streaming protocols for large scale content delivery.
• Partner with business and product stakeholders to translate their goals into security requirements and technical design and implementation.
• Develop and own a consolidated set of application security primitives used across our delivery paths, built once rather than separately per application, extending and going beyond what libraries like OpenSSL provide.
• Optimize the crypto and transport security layers on OC appliances for performance and resource efficiency.
• Develop primitives and mitigations for host-side DoS resilience, including kernel integration to throttle abusive traffic, partnering with adjacent teams for end-to-end protection of our infrastructure.
• Conduct vulnerability research and mitigation for application and protocol-level vulnerabilities across the OC platform.
• Serve as the security owner for OC's protocols and cryptographic foundations and as a liaison with partner organizations, staying ahead of the industry through engagement with key cryptography and security communities.
• Demonstrate versatility by learning and adapting to new architectures and features as they evolve.

Qualifications

• Proven track record of architecting and implementing security features that meaningfully improve system security.
• Deep, hands-on expertise in applied cryptography and security protocols and techniques (TLS, DTLS, QUIC, signatures, key management, AEAD).
• Experience with design, development, and deployment of end-to-end security controls, from architecture through production.
• Success at partnering with others to improve the security posture through cross-functional changes.

Requirements

• Ability to define and self-manage cross-functional projects fueled by ambiguous questions.
• Able to collaborate with business and product stakeholders to translate their goals into security requirements and technical design and implementation.
• Self-starter, curious and not afraid to ask when in doubt.
• Quick learner and excited about learning new technologies.
• Advocate thoughtful collaboration, take pride in your work and enjoy taking full ownership of projects from conception to production.

Nice to have

• Experience designing DoS / resource-exhaustion mitigations for high-scale services.
• Contributions to OpenSSL or similar crypto libraries, or to security protocol standards.
• Active participation in IETF, Crypto Forum Research Group (CFRG), or Real World Crypto.
• Experience securing live streaming or media delivery protocols.
• Experience working on highly distributed systems and fuzzing complex systems.
• Experience securing FreeBSD and Linux.
• Experience with C, Golang, Python.

Benefits

• Comprehensive Health Plans.
• Mental Health support.
• 401(k) Retirement Plan with employer match.
• Stock Option Program.
• Disability Programs.
• Health Savings and Flexible Spending Accounts.
• Family-forming benefits.
• Life and Serious Injury Benefits.
• Paid leave of absence programs.
• Full-time hourly employees accrue 35 days annually for paid time off to be used for vacation, holidays, and sick paid time off.
• Full-time salaried employees are immediately entitled to flexible time off.