Platform Security Engineer

Job Description

Join our NBCUniversal EPIC Legal Team! EPIC symbolizes key foundational principles as we strive to be extraordinary partners to our businesses in an evolving environment. Here at NBCU Legal, we are Expert Partners who provide Inspiring and Creative solutions to our clients. We are subject-matter experts who collaborate with our legal colleagues and clients to guide, solve and push for our collective success. We inspire by bringing optimism and positivity to our work, and apply strategic and innovative thinking to support our businesses.

Job Description
NBCUniversal's Intellectual Property Analytics, Operations, and Technology (IPAOT) team supports NBCUniversal's content globally with four key areas: (1) developing more secure and scalable frameworks for Internet-based video distribution, (2) improving security technologies and processes in content production and distribution, (3) addressing voluminous copyright infringements on websites, apps and protocols, and (4) analyzing data to measure and understand the drivers of unlicensed video consumption on the Internet.
IPAOT group is looking for a passionate problem solver who will assist in safeguarding our streaming platforms and associated applications to help protect our video players and streaming technology against piracy, content theft, and security threats. This role will be working with our architecture teams to design and implement robust security measures, proactively identify vulnerabilities, and effectively communicate risks to the business.

Responsibilities
• Analyze streaming technologies and platforms utilized by the company and ensure they are meeting the appropriate security requirements
• Conduct regular security assessments and audits of streaming infrastructure to include penetration testing
• Collaborate with engineering, legal and development teams to integrate security best practices into the streaming architecture, including DRM and encryption protocols
• Monitor and analyze security incidents including video stream-ripping and DRM bypass attempts, providing timely responses to vulnerabilities and breaches
• Communicate security risks and findings to business stakeholders, distilling complex technical details in actionable insights.
• Stay up to date with latest trends in streaming technology, threats and DRM solutions
• Ensure code obfuscation techniques and anti-tamper measures are implemented and are robust
Qualifications
Basic Requirements
• Bachelor's degree in computer science, Information Technology, or a related field
• Minimum of 3 years experience in platform security, cloud security, or infrastructure security
• Programming and reverse engineering experience, ability to analyze how piracy tools and stream-ripping software work. Proficiency in Python, Javascript, or scripting languages for automation is a plus.
• Expertise in streaming technologies (HLS, DASH, CMAF) including token authentication, signed URLs, and secure playback workflows
• Strong knowledge of security frameworks, protocols, and technologies
• Experience with web and mobile security (browser-based players, iOS/Android security)
• Excellent analytical and problem-solving skills
• Problem-solving mindset. - ability to think like an attacker and anticipate new threats
Nice to have
• Familiarity with forensic watermarking
• Previous experience securing OTT, VOD, or live streaming platforms
• Familiarity with ethical hacking or cybersecurity certifications (CISSP, OSCP, etc.)
Additional Requirements
• Must be willing to work in Universal City, California
• Hybrid: This position has been designated as hybrid, generally contributing from the office a minimum of three days per week.
• This position is eligible for company sponsored benefits, including medical, dental and vision insurance, 401(k), paid leave, tuition reimbursement, and a variety of other discounts and perks. Learn more about the benefits offered by NBCUniversal by visiting the Benefits page of the Careers website. Salary range: $105,000 - $135,000

Jobcode: Reference SBJ-rzxw41-18-224-184-62-42 in your application.