Netflix is one of the world's leading entertainment services, with over 300 million paid memberships in over 190 countries enjoying TV series, films and games across a wide variety of genres and languages. Members can play, pause and resume watching as much as they want, anytime, anywhere, and can change their plans at any time.
The Team
The Attack Emulation Team as part of Detection and Response blends offensive security, defensive security, and threat intelligence to help improve the overall security posture of Netflix. We accomplish this through proactive and reactive attack simulations, supporting tabletops, control validation testing, attacker focused hackdays, purple teaming, workforce education programs, and providing threat intelligence to the business. This is a team of builders and breakers that measures its success through increased control confidence, resilience, security awareness, and response readiness.
The Role
We are looking for an experienced security leader that can directly lead offensive security operations, build and maintain strong cross functional relationships, drive remediation of findings and adoption of security controls, lead and develop a diverse set of security engineers with broad backgrounds and across many security domains. You must have a builders mindset and be able to contribute to broader preventative control initiatives as well as to help inform the larger Detection and Response strategy.
Desired Background
You have direct experience managing a hybrid team of in-person and remote engineers.
You have a track record of mentoring and developing high-performing security engineering teams.
You are an empathetic leader who cultivates a culture of psychological safety and inclusion where all team members can do their best work.
You prefer risk driven, scalable security approaches over policy based mandates.
You are well versed in the latest adversary techniques, modern threat landscapes, and actively running red team operations or adversary emulation scenarios.
You have a demonstrated ability to design and implement scalable security solutions, tools or platforms for threat detection, intelligence gathering, or attack simulation.
Experience collaborating with cross-functional teams to improve organizational security posture.
Excellent communication skills with an ability to convey complex technical concepts to a diverse set of audiences.
You can drive success with minimal process and a heavy emphasis on individual responsibility.
Our compensation structure consists solely of an annual salary; we do not have bonuses. You choose each year how much of your compensation you want in salary versus stock options. To determine your personal top of market compensation, we rely on market indicators and consider your specific job family, background, skills, and experience to determine your compensation in the market range. The range for this role is $190,000 - $920,000.
Netflix provides comprehensive benefits including Health Plans, Mental Health support, a 401(k) Retirement Plan with employer match, Stock Option Program, Disability Programs, Health Savings and Flexible Spending Accounts, Family-forming benefits, and Life and Serious Injury Benefits. We also offer paid leave of absence programs. Full-time hourly employees accrue 35 days annually for paid time off to be used for vacation, holidays, and sick paid time off. Full-time salaried employees are immediately entitled to flexible time off. See more detail about our Benefits here.
Netflix is a unique culture and environment. Learn more here.
Inclusion is a Netflix value and we strive to host a meaningful interview experience for all candidates. If you want an accommodation/adjustment for a disability or any other reason during the hiring process, please send a request to your recruiting partner.
We are an equal-opportunity employer and celebrate diversity, recognizing that diversity builds stronger teams. We approach diversity and inclusion seriously and thoughtfully. We do not discriminate on the basis of race, religion, color, ancestry, national origin, caste, sex, sexual orientation, gender, gender identity or expression, age, disability, medical condition, pregnancy, genetic makeup, marital status, or military service.
Job is open for no less than 7 days and will be removed when the position is filled.