Description

You will evaluate, architect, and implement end-to-end security controls for Roku's global user base, focusing on automated and scalable solutions. You'll conduct security reviews, threat modeling, and partner with infrastructure teams to embed security into workflows. Your work directly protects customers, partners, and Roku's devices, services, and data.

Requirements

• Broad security expertise across networking, DevSecOps, and risk evaluation
• Experience with threat modeling and secure software development lifecycle
• Ability to design automated security solutions for cloud and container environments
• Experience with IAM, network security, and vulnerability management
• Proven ability to drive initiatives end-to-end with high autonomy

Responsibilities

• Conduct enterprise, network, and application level security reviews
• Plan and execute security initiatives and projects
• Improve IAM policies, network configurations, DNS security, and cloud resource management
• Design and implement integrations with third-party security platforms for automation
• Respond to security incidents and drive automation for vulnerability detection