Sr Security Engineer
Posted
Job Title: Sr. Security Engineer
Location: Remote (PST)
Duration: 6+ Contract
Role Summary
We are looking for a senior security engineer to perform advanced testing on our streaming platform and content delivery systems. The focus is on preventing piracy, testing DRM enforcement, device attestation, and ensuring CDN/WAF resilience against application-layer attacks.
Must-Have Skills / Requirements
" Strong experience in application-layer (L7) security testing
" Hands-on knowledge of CDN and WAF testing (CloudFront, Fastly, Akamai)
" Deep expertise in DRM systems: Widevine, PlayReady, FairPlay
" Experience with device ID attestation and spoofing tests
" Proficiency with reverse engineering / debugging tools (Frida, Burp Suite, mitmproxy)
" Understanding of video streaming pipelines, secure playback, and encryption
" Ability to design and execute realistic attack simulations without impacting network infrastructure
Nice-to-Have Skills / Preferences
" Experience with OTT platforms or large-scale video streaming services
" Familiarity with mobile and web player security
" Knowledge of anti-piracy mechanisms and content protection best practices
" Familiarity with DRM license and key management systems
Responsibilities
" Conduct application-layer DDoS testing targeting CDN/WAF systems
" Evaluate DRM enforcement and attempt to bypass content protections
" Test device attestation mechanisms and security tier enforcement
" Provide detailed reports and actionable recommendations to protect premium content
Location: Remote (PST)
Duration: 6+ Contract
Role Summary
We are looking for a senior security engineer to perform advanced testing on our streaming platform and content delivery systems. The focus is on preventing piracy, testing DRM enforcement, device attestation, and ensuring CDN/WAF resilience against application-layer attacks.
Must-Have Skills / Requirements
" Strong experience in application-layer (L7) security testing
" Hands-on knowledge of CDN and WAF testing (CloudFront, Fastly, Akamai)
" Deep expertise in DRM systems: Widevine, PlayReady, FairPlay
" Experience with device ID attestation and spoofing tests
" Proficiency with reverse engineering / debugging tools (Frida, Burp Suite, mitmproxy)
" Understanding of video streaming pipelines, secure playback, and encryption
" Ability to design and execute realistic attack simulations without impacting network infrastructure
Nice-to-Have Skills / Preferences
" Experience with OTT platforms or large-scale video streaming services
" Familiarity with mobile and web player security
" Knowledge of anti-piracy mechanisms and content protection best practices
" Familiarity with DRM license and key management systems
Responsibilities
" Conduct application-layer DDoS testing targeting CDN/WAF systems
" Evaluate DRM enforcement and attempt to bypass content protections
" Test device attestation mechanisms and security tier enforcement
" Provide detailed reports and actionable recommendations to protect premium content
