Security Software Engineer, Security Incident Response Team

Job Description

Security Software Engineer (L5), Security Incident Response Team

The Role

We are looking for an experienced security software engineer with broad security domain expertise across software engineering, data engineering, and experience with Incident Management. You will be responsible to help support, maintain and improve our incident orchestration tool Dispatch, build and maintain data pipelines, and develop tools and solutions for incident management and digital forensics at scale. You will also be a member of our security incident response team acting as an Incident Commander. As a member of SIRT you will actively lead security incident response, apply lessons learned as part of our on-call rotation to improve incident handling and resolution, and utilize your software engineering background to identify points of leverage for automation in our operational response work.

The Team

The Security Incident Response Team (SIRT) is responsible for handling information security incidents and crises across the business. SIRT leverages training, liaison and tooling to scale incident response and mitigate a broad range of risks. We proactively use our experience and data to drive and advocate for investments that drive down risk.

You will work cross functionally with other teams and stakeholders to expand our incident management tooling for non security domains and to remediate risks identified during security incidents. This role blends software engineering, data engineering and operational security incident response with approximately 50% of the time spent on security incident response and post-incident actions, and 50% spent in software engineering and stakeholder engagement.

Desired Background
• At least 5 years of experience building with Python, JavaScript, and frameworks for building APIs and user interfaces (e.g. FastAPI, VueJS, React)
• 2+ years of demonstrated experience in Incident Management as a Security Incident Commander responding to large scale security incidents
• Experience with designing, building, testing, deploying, maintaining, and supporting applications in cloud production environments
• Familiarity with data engineering principles, ETL pipelines, system design and architecture as well as software development life cycles
• Demonstrated experience with big data platforms and relational database management systems and their query languages (e.g. SQL)
• You are passionate about building software in the security domain and are prepared to spend up to half of your time working in an operational capacity supporting that software, and as an incident manager when oncall
• You have excellent written and verbal communication skills, and can communicate complex concepts to a broad range of cross-functional partners
• You operate effectively across teams and disciplines in highly ambiguous and rapidly changing environments

Compensation:

Generally, our compensation structure consists solely of an annual salary; we do not have bonuses. You choose each year how much of your compensation you want in salary versus stock options. To determine your personal top of market compensation, we rely on market indicators and consider your specific job family, background, skills, and experience to determine your compensation in the market range. The range for this role is 100,000 - $720,000.

Benefits:

Netflix provides comprehensive benefits including Health Plans, Mental Health support, a 401(k) Retirement Plan with employer match, Stock Option Program, Disability Programs, Health Savings and Flexible Spending Accounts, Family-forming benefits, and Life and Serious Injury Benefits. We also offer paid leave of absence programs. Full-time hourly employees accrue 35 days annually for paid time off to be used for vacation, holidays, and sick paid time off. Full-time salaried employees are immediately entitled to flexible time off. See more detail about our Benefits here

Culture:

Netflix is a unique culture and environment. Learn more here.

We are an equal-opportunity employer and celebrate diversity, recognizing that diversity of thought and background builds stronger teams. We approach diversity and inclusion seriously and thoughtfully. We do not discriminate on the basis of race, religion, color, ancestry, national origin, caste, sex, sexual orientation, gender, gender identity or expression, age, disability, medical condition, pregnancy, genetic makeup, marital status, or military service.

Job is open for no less than 7 days and will be removed when the position is filled.

Jobcode: Reference SBJ-rz7b0q-3-128-171-192-42 in your application.