Security Engineer 5 - Cloud Architecture, Tooling and Security

Netflix is seeking a cloud security engineer for its Cloud Architecture, Tooling and Security team. The role designs secure cloud access patterns, security boundaries, and scalable solutions across AWS and GCP, while building internal tooling and supporting threat assessments and operational security.

Responsibilities:

• We are looking for a cloud security engineer to join this team to serve as a critical partner in securely enabling new Netflix business verticals, supporting innovation and experimentation, and integrating new acquisitions
• This role is highly collaborative, focusing on designing and implementing secure cloud access patterns, cloud security boundaries, and new paved paths, primarily involving Identity and Access Management (IAM) challenges in AWS and/or GCP
• You will collaborate with software engineering teams to understand business needs and design and implement appropriate, scalable cloud security solutions
• You will also design and implement new cloud security strategies and archetypes to discover, self-serve, right-size, and manage cloud resources, and develop internal tooling and scripting across our multicloud environment, including GCP, to build capabilities where few currently exist
• Furthermore, you will perform threat assessments, apply knowledge of AWS architecture and new AWS services to address security requests, and contribute to operational excellence by reducing risks and eliminating tedious access management minutiae

Requirements:

• the ability to build scrappy tooling/scripting and data analysis tools, is required for success in this Security Engineer role
• A broad and deep understanding of cloud security fundamentals, with a particular focus on CloudSec operations, AWS account management and Security Architecture, and a willingness to work across multiple clouds
• Experience collaborating with product and engineering teams to design security solutions
• Strong verbal and written communication skills for conveying complex technical issues cross-functionally
• A pragmatic approach to security, engaging transparently with the nuances and tradeoffs of security risk
• Proven ability to identify high-leverage work and drive it independently without explicit direction
• Experience securing challenging 3rd-party cloud infrastructure access patterns, such as vendor integrations
• Experience defining insightful and meaningful metrics to gauge and guide cloud security posture or progress
• Prior experience in an L5 role driving mid-complexity projects independently and navigating ambiguity
• We value hands-on experience securing cloud environments beyond AWS, such as GCP, along with a willingness to adopt and adapt to shifting multicloud use cases
• If you haven't worked in a particular cloud before, we're excited to hear how you'd approach learning it, including building foundational tooling and org-level security patterns where few currently exist