Security Engineer 5 – Workforce Security

This is a fully remote position, open to applicants in Minnesota.

📋 Description

• Identify and manage risks across all software utilized on Netflix endpoints

• Create scalable technical security controls that boost business agility and minimize workforce-related risks

• Design, implement, and validate protective security measures for endpoints

• Develop and implement solutions for host hardening, vulnerability identification, and patch management

• Uphold established security standards and prevent configuration drift across devices

• Design and test configurations for host hardening across Mac, Windows, and Linux systems

• Create and execute a comprehensive strategy for Patch and Vulnerability Management

• Enforce vulnerability management protocols and utilize Threat Intelligence to prioritize the remediation of endpoint vulnerabilities at the OS, application, and configuration levels

• Assess build-versus-buy security capabilities through requirements gathering, cost-benefit analysis, and development effort estimation

• Convert complex technical risks into understandable business risks for stakeholders and support informed decision-making

• Offer standard business-hours operational support for Workforce Security

• Participate in infrequent 24/7 Incident Response as required

• Collaborate across functions and manage open-ended problems from concept to product

⛳️ Requirements

• Knowledge of commercially available endpoint MDM solutions like Jamf, Kandji, or Intune

• Practical experience with endpoint vulnerability scanning tools such as CrowdStrike and Tenable

• Experience in designing and testing host hardening configurations for at least two major operating systems (Mac, Windows, Linux)

• Understanding of Vulnerability Management practices

• Competency in Threat Modeling to influence control right-sizing and prioritization efforts

• Ability to validate publicly disclosed exploits and conduct variant analysis

• Scripting capabilities; must be able to script (not to production level), with the use of GenAI being sufficient

• Ability to autonomously drive work delivery

• Skills in cross-functional collaboration

• Familiarity with commercially available corporate security tools related to endpoint, identity, data, and vendor security

• Ability to navigate ambiguity by breaking down strategic goals into actionable project plans

• Proficiency in using metrics and measurements to guide decision-making and outcomes

🏝️ Benefits

• Health Plans

• Mental Health support

• 401(k) Retirement Plan with employer match

• Stock Option Program

• Disability Programs

• Health Savings and Flexible Spending Accounts

• Family-forming benefits

• Life and Serious Injury Benefits

• Paid leave of absence programs

• Full-time hourly employees accrue 35 days annually for paid time off for vacation, holidays, and sick leave

• Full-time salaried employees are immediately entitled to flexible time off