Security Engineer (L5) - Workforce Security

Overview

Netflix is hiring an L5 Security Engineer for Workforce Security, specializing in Endpoint Security.

What you'll do

• Identify and manage risks across software on Netflix endpoints.
• Develop scalable protective endpoint security controls.
• Design, implement, and validate host hardening, vulnerability identification, and patch management to maintain security standards.
• Design and test host hardening configurations for Mac, Windows, and Linux.
• Design, execute, and enforce a patch and vulnerability management strategy using threat intelligence to prioritize remediation by OS, app, and app configuration.
• Evaluate build-vs-buy security capabilities via requirement gathering, cost-benefit analysis, and effort estimation.
• Provide standard business-hours operational support and participate in infrequent 24/7 incident response as needed.

What you'll need

• Knowledge of endpoint MDM solutions such as Jamf, Kandji, or Intune.
• Experience with endpoint vulnerability scanning tools such as CrowdStrike or Tenable.
• Experience designing and testing host hardening configurations for at least two major OSes (Mac, Windows, Linux).
• Understanding of vulnerability management practices.
• Ability to validate publicly disclosed exploits and perform variant analysis.
• Scripting ability (production level not required) with GenAI being sufficient.
• Cross-functional collaboration skills and strong communication/risk translation.

Details

• Location: USA (Remote).
• Employment appears full-time.