Security Software Engineer (L5), Client Security & Protocols Engineering

At Netflix, our mission is to entertain the world. Together, we are writing the next episode - pushing the boundaries of storytelling, global fandom and making the unimaginable a reality. We are a dream team obsessed with the uncomfortable excitement of discovering what happens when you merge creativity, intuition and cutting-edge technology.

Come be a part of what’s next.

The Client Security & Protocols Engineering (CSPE) team secures Netflix from client to edge, spanning client-stack security, device identity, and the secure protocols that carry data between Netflix applications and our services. We work across Consumer Electronics (CE) devices, mobile platforms (iOS and Android), and browsers, with our protocols terminated at the edge, and partner with client and platform teams to build security capabilities into our products.

This role will join a diverse group of security software engineers building and engaging across the company and the industry. Across all consumer devices for streaming, ads, games, and live events, you will help secure Netflix's client applications and the secure transport powering all of Netflix's services. Your work will include designing and building distributed systems enabling secure authentication of Netflix clients and devices at scale.

Bringing an attacker mindset, you will validate controls and ensure the integrity of security capabilities from client to edge.

• Design, build, and operate runtime provisioning services that authenticate Netflix client applications at scale.

• Contribute to the architecture and implementation of next-generation secure transport infrastructure.

• Collaborate across client security and secure protocols domains to build shared, end-to-end ownership from client to edge.

• Partner with client engineering teams to build security capabilities into Netflix applications across CE, mobile, and browser platforms.

• Balance security and product tradeoffs to deliver pragmatic, effective solutions.

• Experience building and operating distributed backend systems in high-availability, high-throughput environments.

• Strong foundational knowledge of a core software development language: C++ or Java.

• Familiarity with applied cryptography and usage of cryptographic libraries (OpenSSL, Cryptolib, BouncyCastle), and algorithms (AES-GCM, ECDSA, ML-DSA, EdDSA).

• A security mindset with ability to in apply engineering rigor to security problems.

• Fluent with AI tools and able to apply them across the engineering workflow, from design and implementation to security analysis and debugging.

• Proven track record of end-to-end ownership: requirements, design, implementation, test, and managing in-field impact.

• Secure communication protocols and client experience is a plus.

Generally, our compensation structure consists solely of an annual salary; we do not have bonuses. You choose each year how much of your compensation you want in salary versus stock options. To determine your personal top of market compensation, we rely on market indicators and consider your specific job family, background, skills, and experience to determine your compensation in the market range.

The range for this role is $400,000.00 - $680,000.00. This compensation range will vary based on location.

Job is open for no less than 7 days and will be removed when the position is filled.