Security Engineer 5 - Cloud Architecture, Tooling and Security

Netflix•Remote, OR

20d•$400,000 - $680,000

About The Position

Netflix is hiring a cloud security engineer for its Cloud Architecture, Tooling and Security (CATS) team. Netflix operates its streaming service control plane on Amazon Web Services, and the CATS team designs strategic cloud security boundaries, provides cloud security expertise, and builds scalable solutions for account management, cloud identity and access management, and operational security. The engineer will partner with teams to securely enable new business verticals, support innovation and experimentation, and integrate acquisitions. The role focuses on designing and implementing secure cloud access patterns, cloud security boundaries, and paved paths, particularly for IAM challenges in AWS and/or GCP. It is not a dedicated software development role, but requires the ability to create practical tooling, scripts, and data-analysis tools. The role involves collaborating with software engineering teams to understand business needs and deliver scalable cloud security solutions; developing strategies and archetypes for discovering, self-serving, right-sizing, and managing cloud resources; and building internal tooling across Netflix’s multicloud environment. The engineer will also perform threat assessments, apply AWS architecture knowledge and evaluate new AWS services to address security requests, and improve operational excellence by reducing risk and tedious access-management work.

Requirements

Broad and deep understanding of cloud security fundamentals, particularly CloudSec operations, AWS account management, and security architecture.
Willingness to work across multiple cloud platforms.
Experience collaborating with product and engineering teams to design security solutions.
Strong verbal and written communication skills for explaining complex technical issues across functions.
Pragmatic approach to security and transparent engagement with security risks and tradeoffs.
Ability to identify high-leverage work and drive it independently without explicit direction.
Experience defining meaningful metrics to assess and guide cloud security posture or progress.
Prior experience in an L5 role driving mid-complexity projects independently and navigating ambiguity.
Ability to build practical tooling, scripts, and data-analysis tools.

Nice To Haves

Hands-on experience securing cloud environments beyond AWS, such as GCP.
Experience securing challenging third-party cloud infrastructure access patterns, such as vendor integrations.

Responsibilities

Collaborate with software engineering teams to understand business needs and design and implement scalable cloud security solutions.
Design and implement secure cloud access patterns, cloud security boundaries, and new paved paths, especially for IAM challenges in AWS and/or GCP.
Develop cloud security strategies and archetypes to discover, self-serve, right-size, and manage cloud resources.
Develop internal tooling, scripts, and data-analysis tools across the multicloud environment, including GCP.
Perform threat assessments.
Apply knowledge of AWS architecture and new AWS services to address security requests.
Reduce security risks and eliminate tedious access-management tasks.
Partner with business and engineering teams to securely enable new business verticals, support experimentation, and integrate acquisitions.

Benefits

Health Plans
Mental Health support
401(k) Retirement Plan with employer match
Stock Option Program
Disability Programs
Health Savings and Flexible Spending Accounts
Family-forming benefits
Life and Serious Injury Benefits
Paid leave of absence programs
Full-time hourly employees accrue 35 days annually for vacation, holidays, and sick paid time off.
Full-time salaried employees are immediately entitled to flexible time off.