Security Engineer (L5) - Cloud Architecture, Tooling and Security

Netflix is a leading entertainment company focused on pushing the boundaries of storytelling and technology. They are seeking a Cloud Security Engineer to design and implement secure cloud access patterns and strategies, primarily focusing on AWS and GCP, while collaborating with engineering teams to ensure scalable security solutions.

Responsibilities:

• Collaborate with software engineering teams to understand business needs and design and implement appropriate, scalable cloud security solutions
• Design and implement new cloud security strategies and archetypes to discover, self-serve, right-size, and manage cloud resources
• Develop internal tooling and scripting for GCP to build capabilities where few currently exist
• Perform threat assessments and apply knowledge of AWS architecture and new AWS services to address security requests
• Contribute to operational excellence by reducing risks and eliminating tedious access management minutiae

Requirements:

• A broad and deep understanding of cloud security fundamentals, with a particular focus on CloudSec operations, AWS account management and Security Architecture
• GCP expertise is a must, specifically the ability to architect and implement organization-wide security guardrails, and identity governance. You should be comfortable defining secure-by-default blueprints for GCP project lifecycles and service account management, building the foundational tooling and org-level security patterns where few currently exist
• Experience collaborating with product and engineering teams to design security solutions
• Strong verbal and written communication skills for conveying complex technical issues cross-functionally
• A pragmatic approach to security, engaging transparently with the nuances and tradeoffs of security risk
• Proven ability to identify high-leverage work and drive it independently without explicit direction
• Experience securing challenging 3rd-party cloud infrastructure access patterns, such as vendor integrations
• Experience defining insightful and meaningful metrics to gauge and guide cloud security posture or progress