Security Engineer (L5), Security Incident Response Team

Netflix

86d • $100,000 - $720,000

About The Position

Netflix is one of the world's leading entertainment services, with over 300 million paid memberships in over 190 countries enjoying TV series, films and games across a wide variety of genres and languages. Members can play, pause and resume watching as much as they want, anytime, anywhere, and can change their plans at any time. The Security Incident Response Team (SIRT) is responsible for handling information security incidents and crises across the business. SIRT leverages training, liaison and tooling to scale incident response and mitigate a broad range of risks. We proactively use our experience and data to drive and advocate for investments that drive down risk. We are looking for an experienced Security Engineer with expertise as a Security Incident Commander/Manager. This role requires broad domain experience in security engineering, data engineering, and software engineering. As a member of SIRT you will triage and investigate security events, and actively lead security incident response as part of our on-call rotation. You will apply lessons learned to improve incident handling and resolution and you will utilize your broad domain expertise to identify points of leverage for automation in our operational response work. You will work cross functionally with other teams and stakeholders to expand our incident management tooling for non security domains and to remediate risks identified during security incidents. This role blends operational security incident response, data engineering, and some software engineering with approximately 40% of the time spent on security incident response and post-incident actions, and 60% spent on engineering tasks and stakeholder engagement.

Requirements

• At least 5 years of experience across different security domains such as detection and incident response, identity and access management, corporate/enterprise security, or product security incident response.
• 3+ years of demonstrated experience in Incident Management as a Security Incident Commander responding to large scale security incidents.
• Experience with designing, building, testing, deploying, maintaining, and supporting applications in cloud production environments.
• Experience with data engineering principles, ETL pipelines, system design and architecture as well as software development life cycles.
• Demonstrated experience with big data platforms and relational database management systems and their query languages (e.g. SQL).
• Excellent written and verbal communication skills, and can communicate complex concepts to a broad range of cross-functional partners.
• Ability to operate effectively across teams and disciplines in highly ambiguous and rapidly changing environments.

Responsibilities

• Triage and investigate security events.
• Lead security incident response as part of the on-call rotation.
• Apply lessons learned to improve incident handling and resolution.
• Identify points of leverage for automation in operational response work.
• Work cross-functionally with other teams and stakeholders to expand incident management tooling.
• Remediate risks identified during security incidents.

Benefits

• Health Plans
• Mental Health support
• 401(k) Retirement Plan with employer match
• Stock Option Program
• Disability Programs
• Health Savings and Flexible Spending Accounts
• Family-forming benefits
• Life and Serious Injury Benefits
• Paid leave of absence programs
• Full-time hourly employees accrue 35 days annually for paid time off
• Full-time salaried employees are immediately entitled to flexible time off.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees