Software Engineer (L4), Cloud Security

Netflix is one of the world's leading entertainment services, with 283 million paid memberships in over 190 countries enjoying TV series, films and games across a wide variety of genres and languages. Members can play, pause and resume watching as much as they want, anytime, anywhere, and can change their plans at any time.

The Role

Netflix Cloud Security is looking for a cloud infrastructure software engineer. As a Software Engineer for Netflix Cloud Security, you will drive product development for our industry-leading innovative security tools such as ConsoleMe and Weep. This work involves development on both existing and new tools to discover, self-serve, right-size, and manage cloud resources while maintaining operational excellence to managing cloud security risk.

This is a distinct role within Cloud Security, to expand our capacity for software development work on our extensive collection of cloud security tools. 

In this role, as a software engineer within a multidisciplinary cloud security team, you will be responsible for the challenges of configuring cloud resources at a massive scale. This role is perfect for you if you get excited about any of the following topics: resilience, observability, operations, debugging, resource thrashing, tagging namespaces, configuration management, system design, distributed systems, devops, observability, replication, monitoring, usability, metrics.

Prior security experience is not required, though you should be interested to learn about the security landscape at Netflix, and work on security-related products. You don't need to be a security expert, but you do need to understand what could go wrong if we expose a critical control plane to an attacker.

The Team

Netflix Cloud Security, within the wider Security Engineering Organization, is responsible for securing our cloud environments. Netflix operates our streaming service control plane on Amazon Web Services, which has led to one of the largest and most sophisticated AWS environments in the world. The tools we build and operate include foundational, load-bearing components of Netflix's cloud infrastructure.

Netflix's Cloud Security tooling includes robust capabilities around Infrastructure as Code, secure configuration orchestration for IAM policies and SCPs, and cloud access and credential management for both developers and applications. In particular, we focus on access and configuration of cloud-native abstractions, while other teams are responsible for securing the data plane and for what happens within each instance (e.g., system security or the content of an S3 bucket). Our work takes the form of tool development, cloud security operations, guidance, and strategy — though not every role is responsible for every part of this work.

Our team operates through empathetic accountability, humanely candid feedback, proactive communication, and inclusion, in order to cultivate a psychologically safe and productive work environment. To learn more about this team, watch our past talks from AWS re:Invent on Multi-account Deployments, Security insights using AWS SDK Instrumentation, and Multi-account management with ConsoleMe. You can also explore the team’s open source software and prior contributions: ConsoleMe, Weep, Repokid, and Snare.

You should have:

• A broad understanding of AWS cloud infrastructure fundamentals (hey you! don't disqualify yourself by underestimati