Security Engineer (L5), Security Protocols Engineering

Netflix is one of the world's leading entertainment services, with over 300 million paid memberships in over 190 countries enjoying TV series, films and games across a wide variety of genres and languages. Members can play, pause and resume watching as much as they want, anytime, anywhere, and can change their plans at any time.

The Team

The Security Protocols Engineering (SPE) team is responsible for developing and supporting the communication protocols that enable Netflix clients to interact securely with Netflix’s backend infrastructure. In addition, SPE is responsible for providing security assessments for products and services leveraging these protocols as well as those requiring identification, authentication, and authorization properties.

The Role

We are seeking a thoughtful and collaborative senior security engineer to join our team. In this role, you will be responsible for developing security architectures and guiding our product teams in implementing security best practices. You will be focused on enhancing our user identity, authentication, and authorization capabilities to address evolving business requirements. You will work closely with your peers in the Security Protocols Engineering team and directly influence product and partner organizations across Netflix. You will provide incident response support by triaging and routing requests to subject matter experts in the organization. We are looking for a highly responsible, disciplined, and self-motivated candidate to help us achieve these goals.

Desired Background

• Expertise in developing security architectures for large-scale distributed systems, including identity and access management and network protocols.

• Ability to rapidly assess a system's architecture from a security standpoint, identifying potential vulnerabilities and design flaws.

• Track record of developing and influencing the implementation of security solutions and driving their execution resulting in tangible impact.

• You have a strong background in secure development lifecycle practices including security architecture, threat modeling, risk assessments, secure coding practices, monitoring, and security testing.

• Expertise in common AuthN/AuthZ frameworks such as OAuth, OpenID Connect, SSO, and MFA.

• You are a fast learner with experience understanding complex engineering ecosystems and partnering with cross-functional teams in ambiguous problem spaces.

• Excellent written and verbal communication skills and ability to align leadership and cross-functional partners on vision and long-term strategy.

• Your approach is empathetic and user-focused. You always ensure that your strategies consider business needs and customer experience.

• Experience using data to inform decisions and evaluate effectiveness of security controls (metrics, KPIs, assessments)

• Familiarity with risk based analysis and prioritization.

• Prior content delivery, live streaming, and online gaming expertise is a plus.

We encourage you to apply even if you don’t meet every criteria listed above. We value each candidate's unique perspectives, skills, and experiences.

Some other reasons to work @ Netflix

• You will be able to facilitate security work that impacts Netflix consumer products.

• You will have the ability to innovate and collaborate with an industry-leading security team.

• You will be able to contribute to Netflix initiatives focused on developing and evangelizing security best practices.

• You will be able to research new ideas and share your ideas across the community.

You can learn more about life at Netflix by reading our culture memo and learning more about our technology at Netflix TechBlog.

Our compensation structure consists solely of an annual salary; we do not have bonuses. You choose each year how much of your compensation you want in salary versus stock options. To determine your personal top of market compensation, we rely on market indicators and consider your specific job family, background, skills, a