Security Analytics Engineer L5 at Netflix

Job description

At Netflix, our mission is to entertain the world. Together, we are writing the next episode - pushing the boundaries of storytelling, global fandom and making the unimaginable a reality. We are a dream team obsessed with the uncomfortable excitement of discovering what happens when you merge creativity, intuition and cutting-edge technology. Come be a part of what’s next. The team you will join: Consumer Security Foundations (CSF) is a team within the Consumer Product Security and Trust organization which secures Netflix for our customers. CSF builds the shared data, tools, and infrastructure that Netflix's consumer security teams rely on to protect our members and products. Instead of owning one specific security domain, we build the common foundation, the shared pipelines, a central source of truth, and a unified view of risk, which makes consumer security teams faster and more effective. Our Analytics Engineers build the piece of that foundation that turns raw security data into a story people can act on: the pipelines, metrics, and dashboards that give every security team, and Netflix leadership, a clear, shared view of risk. What you will work on: As a Security Analytics Engineer on CSF, you will do the hands-on analytics that gets to the root of consumer risk, and build the data foundation, metrics, and dashboards that turn those findings into a single, trusted narrative that leadership, product partners, and other security teams can act on. • Drive the analytics behind device and authentication risk, digging into signals like device trust, login/auth protocols, and access patterns to surface where and how risk shows up for our members • Be a thought partner in shaping the strategy behind our consumer security risk metrics, deciding what the organization should measure and why, analyzing the underlying data to validate what's meaningful, and translating that into a dashboard that gives every security team a shared, current view of top risks • Define and evolve our consumer product risk portfolio, using data to quantify and prioritize the ground-truth inventory of risk areas across our security organization, driving alignment across teams and with the broader company risk registry • Influence how our organization's risk story is told at the leadership level, shaping the analysis and narrative behind quarterly risk reviews, monthly metrics reviews, and leadership-level cost-of-fraud reporting • Partner strategically with security PMs and product teams to define what a comprehensive security metrics and controls story looks like for each product vertical, and drive its adoption • Collaborate closely with threat-modeling partners to get ahead of emerging risks, using data to shape how they get measured and reported rather than reacting after the fact • Build and maintain the data pipelines and metrics that power our analytics and dashboards, and design solutions other consumer security teams can build on, driving down one-off tooling across the organization Desired skills and background: • Domain expertise in consumer product security, such as fraud, account security, abuse/trust & safety, authentication, or privacy, and fluency in how security risk gets measured and reported • Strong engineering fundamentals, including well written, tested, maintainable code, sound data modeling, and data pipelines built to scale • Expert in analytics (SQL, Presto, Spark SQL, Python), with strong critical thinking and a demonstrated ability to turn raw data into clear, compelling narratives • Quick to pick up new tools and techniques, including using AI/LLM-based tools to work faster and smarter across analysis, engineering, and reporting • Comfort operating in ambiguity, building a data model, portfolio, or dashboard from a 0-to-1 state and iterating with cross-functional input • A strong bias for action, comfortable moving fast, making decisions with incomplete information, and driving ideas to production rather than waiting for perfect conditions We are looking for thoughtful professionals who enable our mission and support our culture of freedom and responsibility. You can learn more about life at Netflix by watching our security talks or exploring our open source work . The Netflix culture permeates our work environment. It determines who we hire, how we work together, and how we make decisions. It encourages us to bring our best every day while valuing collaboration over individual achievement. Generally, our compensation structure consists solely of an annual salary; we do not have bonuses. You choose each year how much of your compensation you want in salary versus stock options. To determine your personal top of market compensation, we rely on market indicators and consider your specific job family, background, skills, and experience to determine your compensation in the market range. The range for this role is $400,000.00 - $680,000.00. This compensation range will vary based on location. Netflix provides comprehensive benefits including Health Plans, Mental Health support, a 401(k) Retirement Plan with employer match, Stock Option Program, Disability Programs, Health Savings and Flexible Spending Accounts, Family-forming benefits, and Life and Serious Injury Benefits. We also offer paid leave of absence programs. Full-time hourly employees accrue 35 days annually for paid time off to be used for vacation, holidays, and sick paid time off. Full-time salaried employees are immediately entitled to flexible time off. See more details about our Benefits here . Netflix is a unique culture and environment. Learn more here . Inclusion is a Netflix value and we strive to host a meaningful interview experience for all candidates. If you want an accommodation/adjustment for a disability or any other reason during the hiring process, please send a request to your recruiting partner. We are an equal-opportunity employer and celebrate diversity, recognizing that diversity builds stronger teams. We approach diversity and inclusion seriously and thoughtfully. We do not discriminate on the basis of race, religion, color, ancestry, national origin, caste, sex, sexual orientation, gender, gender identity or expression, age, disability, medical condition, pregnancy, genetic makeup, marital status, or military service. Job is open for no less than 7 days and will be removed when the position is filled.

Requirements

Must-haves

Drive the analytics behind device and authentication risk, digging into signals like device trust, login/auth protocols, and access patterns to surface where and how risk shows up for our members
Influence how our organization's risk story is told at the leadership level, shaping the analysis and narrative behind quarterly risk reviews, monthly metrics reviews, and leadership-level cost-of-fraud reporting
Partner strategically with security PMs and product teams to define what a comprehensive security metrics and controls story looks like for each product vertical, and drive its adoption
Collaborate closely with threat-modeling partners to get ahead of emerging risks, using data to shape how they get measured and reported rather than reacting after the fact
Build and maintain the data pipelines and metrics that power our analytics and dashboards, and design solutions other consumer security teams can build on, driving down one-off tooling across the organization
Domain expertise in consumer product security, such as fraud, account security, abuse/trust & safety, authentication, or privacy, and fluency in how security risk gets measured and reported
Strong engineering fundamentals, including well written, tested, maintainable code, sound data modeling, and data pipelines built to scale
Expert in analytics (SQL, Presto, Spark SQL, Python), with strong critical thinking and a demonstrated ability to turn raw data into clear, compelling narratives
Quick to pick up new tools and techniques, including using AI/LLM-based tools to work faster and smarter across analysis, engineering, and reporting
Comfort operating in ambiguity, building a data model, portfolio, or dashboard from a 0-to-1 state and iterating with cross-functional input
A strong bias for action, comfortable moving fast, making decisions with incomplete information, and driving ideas to production rather than waiting for perfect conditions
Netflix is a unique culture and environment. Learn more here .
Job is open for no less than 7 days and will be removed when the position is filled.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

sqlpythonaillm

Platform: eightfold
Effort: medium

Benefits

Benefits detected in the listing.

401(K)

Paid Time Off