Security Engineer

About the role

Roku is seeking a dedicated Security Engineer to join our dynamic team in Austin, Texas. In this position, you will play a crucial role in safeguarding our systems and data against potential threats. You will work closely with cross-functional teams to implement security measures that protect our digital assets while ensuring compliance with industry standards. This is an exciting opportunity to contribute to the security posture of a leading streaming platform and to be part of a culture that values innovation and collaboration.

Key facts

What you'll do

• Design, implement, and maintain security protocols to protect Roku's infrastructure and applications from cyber threats.
• Conduct regular security assessments and vulnerability scans to identify and mitigate risks in our systems.
• Collaborate with software development teams to integrate security best practices into the software development lifecycle (SDLC).
• Monitor security alerts and incidents, responding promptly to potential breaches and conducting thorough investigations.
• Develop and maintain security documentation, including policies, procedures, and incident response plans.
• Provide security training and awareness programs for employees to foster a culture of security within the organization.
• Stay up-to-date with the latest security trends, vulnerabilities, and regulatory requirements to ensure compliance and proactive defense strategies.
• Participate in security audits and assessments, working with external auditors as necessary to validate our security posture.
• Work with cloud security tools and technologies to secure cloud-based applications and services.
• Analyze security incidents to determine root causes and implement corrective actions to prevent future occurrences.
• Collaborate with IT and network teams to ensure that security measures are effectively integrated into the overall IT infrastructure.
• Assist in the development of security metrics and reporting to communicate security status and improvements to stakeholders.

Requirements

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• A minimum of 3 years of experience in information security or a related field.
• Strong understanding of security frameworks and standards such as NIST, ISO 27001, or CIS.
• Proficiency in security tools and technologies, including firewalls, intrusion detection systems, and vulnerability management tools.
• Experience with programming or scripting languages such as Python, Java, or PowerShell for automation and security tasks.
• Familiarity with cloud security principles and experience with platforms such as AWS, Azure, or Google Cloud.
• Excellent analytical and problem-solving skills, with a keen attention to detail.
• Strong communication skills, both verbal and written, with the ability to convey complex security concepts to non-technical stakeholders.
• Ability to work independently and collaboratively in a fast-paced environment.

Nice to have

• Relevant security certifications such as CISSP, CISM, or CEH.
• Experience with security incident response and forensics.
• Knowledge of secure coding practices and application security testing tools.
• Familiarity with DevSecOps practices and tools.
• Experience with threat intelligence platforms and security information and event management (SIEM) systems.

Skills & tools

• Security assessment and vulnerability management tools (e.g., Nessus, Qualys)
• SIEM tools (e.g., Splunk, LogRhythm)
• Cloud security tools and services (e.g., AWS Security Hub, Azure Security Center)
• Programming languages (e.g., Python, Java, PowerShell)
• Incident response and forensic analysis tools

Practical notes

• This position is based in Austin, Texas, and may require occasional travel for training or conferences.
• Candidates must be eligible to work in the United States; visa sponsorship is available for qualified individuals.
• The role may involve on-call responsibilities to respond to security incidents outside of regular business hours.
• Roku promotes a diverse and inclusive workplace and encourages applicants from all backgrounds to apply.

Join Roku and be part of a team that is dedicated to delivering a secure and enjoyable streaming experience to millions of users worldwide. If you are passionate about security and eager to make a difference, we would love to hear from you!