Netflix
Posted 4w ago

Security Software Engineer (L5), Client Security & Protocols Engineering

Netflix
United States
$400k-$680k/yrRemoteFull Time
Responsibilities
  • designing systems
  • building infrastructure
  • securing clients
Requirements
  • Experience building distributed backend systems
  • Strong C++ or Java skills
  • Familiarity with applied cryptography and cryptographic libraries
  • Security mindset and end-to-end ownership
Technical tools mentioned
C++JavaOpenSSLCryptolibBouncyCastle

Job description

At Netflix, our mission is to entertain the world. Together, we are writing the next episode - pushing the boundaries of storytelling, global fandom and making the unimaginable a reality. We are a dream team obsessed with the uncomfortable excitement of discovering what happens when you merge creativity, intuition and cutting-edge technology. Come be a part of what’s next.

The team you will join:

The Client Security & Protocols Engineering (CSPE) team secures Netflix from client to edge, spanning client-stack security, device identity, and the secure protocols that carry data between Netflix applications and our services. We work across Consumer Electronics (CE) devices, mobile platforms (iOS and Android), and browsers, with our protocols terminated at the edge, and partner with client and platform teams to build security capabilities into our products.

What you will work on:

This role will join a diverse group of security software engineers building and engaging across the company and the industry. Across all consumer devices for streaming, ads, games, and live events, you will help secure Netflix's client applications and the secure transport powering all of Netflix's services. Your work will include designing and building distributed systems enabling secure authentication of Netflix clients and devices at scale. Bringing an attacker mindset, you will validate controls and ensure the integrity of security capabilities from client to edge.

What You Will Work On:

  • Design, build, and operate runtime provisioning services that authenticate Netflix client applications at scale.

  • Contribute to the architecture and implementation of next-generation secure transport infrastructure.

  • Collaborate across client security and secure protocols domains to build shared, end-to-end ownership from client to edge.

  • Partner with client engineering teams to build security capabilities into Netflix applications across CE, mobile, and browser platforms.

  • Balance security and product tradeoffs to deliver pragmatic, effective solutions.

Desired Skills and Background:

  • Experience building and operating distributed backend systems in high-availability, high-throughput environments.

  • Strong foundational knowledge of a core software development language: C++ or Java.

  • Familiarity with applied cryptography and usage of cryptographic libraries (OpenSSL,  Cryptolib, BouncyCastle), and algorithms (AES-GCM, ECDSA, ML-DSA, EdDSA).

  • A security mindset with ability to in apply engineering rigor to security problems. 

  • Fluent with AI tools and able to apply them across the engineering workflow, from design and implementation to security analysis and debugging.

  • Proven track record of end-to-end ownership: requirements, design, implementation, test, and managing in-field impact.

  • Secure communication protocols and client experience is a plus.

 

Generally, our compensation structure consists solely of an annual salary; we do not have bonuses. You choose each year how much of your compensation you want in salary versus stock options. To determine your personal top of market compensation, we rely on market indicators and consider your specific job family, background, skills, and experience to determine your compensation in the market range. The range for this role is $400,000.00 - $680,000.00. This compensation range will vary based on location.

Netflix provides comprehensive benefits including Health Plans, Mental Health support, a 401(k) Retirement Plan with employer match, Stock Option Program, Disability Programs, Health Savings and Flexible Spending Accounts, Family-forming benefits, and Life and Serious Injury Benefits. We also offer paid leave of absence programs. Full-time hourly employees accrue 35 days annually for paid time off to be used for vacation, holidays, and sick paid time off. Full-time salaried employees are immediately entitled to flexible time off. See more details about our Benefits here.

Netflix is a unique culture and environment. Learn more here.

Inclusion is a Netflix value and we strive to host a meaningful interview experience for all candidates. If you want an accommodation/adjustment for a disability or any other reason during the hiring process, please send a request to your recruiting partner.

We are an equal-opportunity employer and celebrate diversity, recognizing that diversity builds stronger teams. We approach diversity and inclusion seriously and thoughtfully. We do not discriminate on the basis of race, religion, color, ancestry, national origin, caste, sex, sexual orientation, gender, gender identity or expression, age, disability, medical condition, pregnancy, genetic makeup, marital status, or military service.

Job is open for no less than 7 days and will be removed when the position is filled.

About Netflix

Provider of global streaming entertainment and video content.

Year founded
1997
Employees
16000
Organization type
Public
Headquarters
US

Similar jobs

Security Software Engineer roles
2d
Save
Mark Applied
Hide
Security Software Engineer (Starlink)
Hawthorne or Bastrop or Redmond
$130k-$195k/yr OnsiteFull Time
SpaceX
SpaceX: Designs and launches advanced rockets and satellite internet constellations.
2+ YOEBachelor's degree in computer science or STEM, or 2+ years of security software development experience; programming experience in Python, C++, or Golang and large-scale security systems experience.
Python, C++, Golang, Trusted Platform Modules (TPMs), Hardware Security Modules (HSMs), TCP/IP, UDP
5d
Save
Mark Applied
Hide
Software Security Engineer
Dearborn, Michigan, United States
$61-$66/hr OnsiteContract
Stefanini
Stefanini: Global provider of IT consulting and digital business solutions.
6+ YOEBachelor's degree, 6+ years of IT experience, 4+ years of software development experience, secure SDLC and application security expertise, automation skills, and proficiency in at least one programming language.
SAST, DAST, SCA, Azure, GCP, AWS, Java, JavaScript, Python, Spring Security, Spring Boot, Linux, React, REST, IAM, Burp Suite, Dynatrace, Salesforce, Pega, Apache Tomcat, SBOM, TCP/IP, CI/CD
6d
Save
Mark Applied
Hide
Security Software Engineer, Enterprise Technology Services
Sunnyvale, California, United States
OnsiteFull Time
Apple
AppleNASDAQ: AAPL: Designs and sells consumer electronics, software, and online services.
Develop cryptographic services and security solutions that protect sensitive information and support secure, scalable enterprise systems.
1w
Save
Mark Applied
Hide
Principal Security Software Engineer, IAM
San Mateo, California, United States
$326k-$385k/yr HybridFull Time
Roblox
RobloxNYSE: RBLX: Platform for creating and playing user-generated 3D digital experiences.
8+ YOERequires 8+ years building scalable distributed backend systems, deep IAM expertise, systems-language proficiency, technical leadership and mentoring experience, AI fluency, and a bachelor's degree or equivalent in a technical field.
SPIFFE, SPIRE, Vault, Go, Rust, Java, C++, Python, C# .NET, RBAC, ABAC, mTLS, PKI, PAM
1w
Save
Mark Applied
Hide
Software Security Engineer
Colorado Springs, Colorado, United States
$55k-$126k/yr HybridFull Time
Booz Allen Hamilton
Booz Allen HamiltonNYSE: BAH: Consulting and technology services for government and commercial clients
Bachelor's degree in a relevant field, programming ability, multiple-priority management, and eligibility for a Secret clearance. Experience with cybersecurity and application security tools is preferred.
SAST, DAST, SCA, IaC, Git, Agile, Scrum, DevSecOps, SBOM, Kubernetes, NIST SSDF, NIST AI RMF, MITRE ATT&CK
1w
Save
Mark Applied
Hide
Software Security Engineer
Colorado Springs or San Antonio
$55k-$126k/yr OnsiteFull Time
Booz Allen Hamilton
Booz Allen HamiltonNYSE: BAH: Provides technology and management consulting services to diverse organizations.
Bachelor's degree in computer science, cybersecurity, information systems, or engineering; programming experience; ability to obtain a Secret clearance; and ability to manage priorities and solve problems.
SAST, DAST, SCA, IaC, Git, Agile, Scrum, DevSecOps, SBOM, Kubernetes, NIST SSDF, NIST AI RMF, MITRE ATT&CK, AI
1w
Save
Mark Applied
Hide
Senior Software Security Engineer- Cloud/GovCloud (Top Secret cleared)
Reston, Virginia, United States
$119k-$203k/yr RemoteFull Time
ICF
ICFNASDAQ: ICFI: Provides strategic consulting and technology services to global organizations.
5+ YOEActive Top Secret clearance and 5+ years in application security, secure software development, or cybersecurity engineering; AWS cloud experience, secure code review, vulnerability assessment, and a technical bachelor's degree preferred.
AWS, AWS GovCloud, SAST, DAST, SCA, OWASP, NIST, DoD STIGs
1w
Save
Mark Applied
Hide
Senior Security Software Engineer
Santa Clara, California, United States
$152k-$288k/yr OnsiteFull Time
NVIDIA
NVIDIANASDAQ: NVDA: Designs GPU-accelerated computing and artificial intelligence hardware.
5+ YOEBachelor's degree or equivalent experience, 5+ years in security software engineering, and expertise in security protocols, cryptography, system architecture, secure coding, security assessments, and AI tooling.
AI tooling, security assessment tools, pre-silicon simulation, emulation, test automation, GPU, SOC, Security Enclave, Secure Boot, Root of Trust, Runtime Security, Confidential Compute, Cryptography