Platform Security Engineer

Company Description
NBCUniversal is one of the world's leading media and entertainment companies. We create world-class content, which we distribute across our portfolio of film, television, and streaming, and bring to life through our theme parks and consumer experiences. We own and operate leading entertainment and news brands, including NBC, NBC News, MSNBC, CNBC, NBC Sports, Telemundo, NBC Local Stations, Bravo, USA Network, and Peacock, our premium ad-supported streaming service. We produce and distribute premier filmed entertainment and programming through Universal Filmed Entertainment Group and Universal Studio Group, and have world-renowned theme parks and attractions through Universal Destinations & Experiences. NBCUniversal is a subsidiary of Comcast Corporation.
Our impact is rooted in improving the communities where our employees, customers, and audiences live and work. We have a rich tradition of giving back and ensuring our employees have the opportunity to serve their communities. We champion an inclusive culture and strive to attract and develop a talented workforce to create and deliver a wide range of content reflecting our world.
Comcast NBCUniversal has announced its intent to create a new publicly traded company ('SpinCo') comprised of most of NBCUniversal's cable television networks, including USA Network, CNBC, MSNBC, Oxygen, E!, SYFY and Golf Channel along with complementary digital assets Fandango, Rotten Tomatoes, GolfNow, GolfPass, and SportsEngine. The well-capitalized company will have significant scale as a pure-play set of assets anchored by leading news, sports and entertainment content. The spin-off is expected to be completed during 2025.
Job Description
NBCUniversal's Intellectual Property Analytics, Operations, and Technology (IPAOT) team supports NBCUniversal's content globally with four key areas: (1) developing more secure and scalable frameworks for Internet-based video distribution, (2) improving security technologies and processes in content production and distribution, (3) addressing voluminous copyright infringements on websites, apps and protocols, and (4) analyzing data to measure and understand the drivers of unlicensed video consumption on the Internet.
IPAOT group is looking for a passionate problem solver who will assist in safeguarding our streaming platforms and associated applications to help protect our video players and streaming technology against piracy, content theft, and security threats. This role will be working with our architecture teams to design and implement robust security measures, proactively identify vulnerabilities, and effectively communicate risks to the business.
Responsibilities

• Analyze streaming technologies and platforms utilized by the company and ensure they are meeting the appropriate security requirements
• Conduct regular security assessments and audits of streaming infrastructure to include penetration testing
• Collaborate with engineering, legal and development teams to integrate security best practices into the streaming architecture, including DRM and encryption protocols
• Monitor and analyze security incidents including video stream-ripping and DRM bypass attempts, providing timely responses to vulnerabilities and breaches
• Communicate security risks and findings to business stakeholders, distilling complex technical details in actionable insights.
• Stay up to date with latest trends in streaming technology, threats and DRM solutions
• Ensure code obfuscation techniques and anti-tamper measures are implemented and are robust

Qualifications
Basic Requirements

• Bachelor's degree in computer science, Information Technology, or a related field
• Minimum of 3 years experience in platform security, cloud security, or infrastructure security
• Programming and reverse engineering experience, ability to analyze how piracy tools and stream-ripping software work. Proficiency in Python, Javascript, or a scripting language for automation is required.
• Expertise in streaming technologies (HLS, DASH, CMAF) including token authentication, signed URLs, and secure playback workflows
• Strong knowledge of security frameworks, protocols, and technologies
• Experience with web and mobile security (browser-based players, iOS/Android security)
• Excellent analytical and problem-solving skills
• Problem-solving mindset. - ability to think like an attacker and anticipate new threats

Nice to have

• Familiarity with forensic watermarking
• Previous experience securing OTT, VOD, or live streaming platforms
• Familiarity with ethical hacking or cybersecurity certifications (CISSP, OSCP, etc.)

Additional Requirements

• Interested candidate must submit a resume/CV through www.nbcunicareers.com to be considered
• Must be willing to work in Universal City, California
• Hybrid: This position has been designated as hybrid, generally contributing from the office a minimum of three days per week.
• This position is eligible for company sponsored benefits, including medical, dental and vision insurance, 401(k), paid leave, tuition reimbursement, and a variety of other discounts and perks. Learn more about the benefits offered by NBCUniversal by visiting the Benefits page of the Careers website. Salary range: $105,000 - $135,000

Additional Information
As part of our selection process, external candidates may be required to attend an in-person interview with an NBCUniversal employee at one of our locations prior to a hiring decision. NBCUniversal's policy is to provide equal employment opportunities to all applicants and employees without regard to race, color, religion, creed, gender, gender identity or expression, age, national origin or ancestry, citizenship, disability, sexual orientation, marital status, pregnancy, veteran status, membership in the uniformed services, genetic information, or any other basis protected by applicable law.
NBCUniversal will consider for employment qualified applicants with criminal histories, or arrest or conviction records, in a manner consistent with relevant legal requirements, including the City of Los Angeles' Fair Chance Initiative For Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act, where applicable.
If you are a qualified individual with a disability or a disabled veteran and require support throughout the application and/or recruitment process as a result of your disability, you have the right to request a reasonable accommodation. You can submit your request to [email protected].