Note: The job is a remote job and is open to candidates in USA. Netflix is an entertainment and streaming technology company whose Open Connect group builds and manages the content delivery network that delivers Netflix streaming video and supports initiatives such as Cloud Games and Live. The Security Software Engineer will own protocol and foundational security for Open Connect edge appliances, designing security primitives, optimizing cryptographic and transport layers, mitigating denial-of-service threats, researching vulnerabilities, and partnering across the organization.
Responsibilities
- Design and build security primitives that are necessary for existing and innovative new streaming protocols for large scale content delivery
- Partner with business and product stakeholders to translate their goals into security requirements and technical design and implementation
- Develop and own a consolidated set of application security primitives used across our delivery paths, built once rather than separately per application, extending and going beyond what libraries like OpenSSL provide
- Optimize the crypto and transport security layers on OC appliances for performance and resource efficiency
- Develop primitives and mitigations for host-side DoS resilience, including kernel integration to throttle abusive traffic, partnering with adjacent teams for end-to-end protection of our infrastructure
- Conduct vulnerability research and mitigation for application and protocol-level vulnerabilities across the OC platform
- Serve as the security owner for OC's protocols and cryptographic foundations and as a liaison with partner organizations, staying ahead of the industry through engagement with key cryptography and security communities
- Demonstrate versatility by learning and adapting to new architectures and features as they evolve
Skills
- Proven track record of architecting and implementing security features that meaningfully improve system security
- Deep, hands-on expertise in applied cryptography and security protocols and techniques (TLS, DTLS, QUIC, signatures, key management, AEAD)
- Experience with design, development, and deployment of end-to-end security controls, from architecture through production
- Success at partnering with others to improve the security posture through cross-functional changes
- Experience designing DoS / resource-exhaustion mitigations for high-scale services
- Contributions to OpenSSL or similar crypto libraries, or to security protocol standards
- Active participation in IETF, Crypto Forum Research Group (CFRG), or Real World Crypto
- Experience securing live streaming or media delivery protocols
- Experience working on highly distributed systems and fuzzing complex systems
- Experience securing FreeBSD and Linux
- Experience with C, Golang, Python
Benefits
- Health Plans
- Mental Health support
- A 401(k) Retirement Plan with employer match
- Stock Option Program
- Disability Programs
- Health Savings and Flexible Spending Accounts
- Family-forming benefits
- Life and Serious Injury Benefits
- Paid leave of absence programs
- Full-time salaried employees are immediately entitled to flexible time off
- Remote work arrangement
Company Overview
Company H1B Sponsorship