Security Engineer (L5) - Application And Infrastructure Security

At Netflix we do one thing - entertainment - and we aim to do it really well. To accomplish this goal, we must produce, distribute, and stream content at a massive scale. We have a strong engineering organization that enables us to achieve these business objectives and a unique and creative culture that guides us to operate with “Freedom and Responsibility”. This helps keep engineering velocity high, but also means that our security team needs to operate differently than a traditional security team. Employees have tremendous freedom in their work, along with the corresponding responsibility to do the right thing for Netflix. Instead of controlling engineers with process and security gates, we enable them to build secure code and provide them with adequate security context to make the right decisions for Netflix.

The Application and Infrastructure Security (AIS) team aims to reduce risk in our engineering ecosystem through strategic security initiatives in high-risk or high-leverage areas. We conduct risk discovery, security strategy development and execution, identification and execution of high impact security initiatives across Netflix applications and infrastructure (e.g. network security strategy for corporate infrastructure, Secure Application Gateway for all internal applications).

We are looking for a Security Engineer to join the team to work closely with our infrastructure, platform, and network engineering teams to help evolve our security strategy in these areas to meet dynamic business demands. You will partner closely with engineering teams and other security functions to improve security at Netflix.

Desired Background

We are looking for a thoughtful security professional who enables our mission and supports our culture of freedom and responsibility. We encourage you to apply even if you don't meet every single one of the listed criteria. We value the unique perspectives, skills, and experiences each candidate brings with them.

Execution, Collaboration, Influence, and Decision Making

• Experience with an engineering-focused approach to infrastructure and platform security.
• Comfortable both driving broad initiatives and digging deep in technical domains.
• Can build understanding and develop sound security strategies amidst ambiguity.
• Demonstrated skill and judgment in prioritizing, influencing, and driving remediation and risk reduction strategies at scale through complex organizations.
• Strong written and verbal communication skills, and an ability to articulate security objectives to a variety of audiences.

Security Domain Expertise

• Security architecture, threat modeling, secure design.
• Experience conducting security assessments and developing remediation strategies.
• Core network security concepts, e.g. zero trust architecture.
• Securing platform and developer infrastructure.
• Operating systems security, e.g. hardening, patch and vulnerability management, access management, monitoring.

You can learn more about life at Netflix by watching our security talks or exploring our open source work.

At Netflix, we carefully consider a wide range of compensation factors to determine your personal top of market. We rely on market indicators to determine compensation and consider your specific job, skills, and experience to get it right. These considerations can cause your compensation to vary and will also be dependent on your location.

The overall market range for roles in this area of Netflix is typically $100,000 - $700,000.

This market range is based on total compensation (vs. only base salary), which is in line with our compensation philosophy. Netflix is a unique culture and environment. Learn more here.