[Remote] Software Engineer (L6), Platform Security
Note: The job is a remote job and is open to candidates in USA. Netflix is a global streaming service that entertains the world through innovative storytelling and technology. They are seeking a Security Software Engineer to architect and implement system-level security for their content delivery network and gaming appliances, ensuring security from hardware to software.
Responsibilities
- Define and evolve the security architecture of the full compute stack, from hardware interfaces (FPGA, BIOS/UEFI, BMC) through dual operating systems (FreeBSD and Linux)
- Implement security enhancements using a variety of methods such as kernel and user-space development, configuration changes, or leveraging hardware-based security features such as TPMs and hardware offload
- Drive platform integrity work including measured/secure boot for appliances and improved BMC access controls and auditability
- Analyze and triage new system-level security bugs, including hardware/GPU and OS isolation issues and provide appliance security expertise during incident response
- Partner with stakeholders in different organizations to build secure architecture for binary ingestion and execution
- Develop automated systems and low-level tooling to perform vulnerability research and reduce manual security overhead in build, test, and release workflows
- Act as a security liaison between OC and other organizations, and stay plugged into the right external groups (silicon/firmware vendors, OS communities, disclosure partners)
- Demonstrate versatility by learning and adapting to new architectures and features as they evolve
Skills
- Proven track record of architecting and implementing security features that meaningfully improve system security
- Deep expertise in low-level systems and hardware security across a heterogeneous stack (kernels, firmware, BMC, BIOS/UEFI, FPGA)
- Experience using operating system execution environments such as containers or virtual machines to enhance security
- Success at partnering with others to improve the security posture through cross-functional changes
- Experience using AI agents to automate security research
- Experience conducting security research, with published materials to show for it
- Experience conducting penetration tests which found meaningful opportunities for improvement and identified security gaps
- Kernel development experience
- Experience successfully using TPMs/HSMs, trusted execution environments, and other hardware features
- Experience with measured/secure boot and hardware roots of trust
- Experience working on highly distributed systems and fuzzing complex systems
- Experience securing FreeBSD, Linux; familiarity with GPU/virtualization isolation
- Experience with C, Golang, Python
Benefits
- Comprehensive Health Plans
- Mental Health support
- A 401(k) Retirement Plan with employer match
- Stock Option Program
- Disability Programs
- Health Savings and Flexible Spending Accounts
- Family-forming benefits
- Life and Serious Injury Benefits
- Paid leave of absence programs
- Full-time hourly employees accrue 35 days annually for paid time off to be used for vacation, holidays, and sick paid time off.
- Full-time salaried employees are immediately entitled to flexible time off.
Company Overview
Company H1B Sponsorship