Job Title: Sr. Security Engineer
Location: Remote (PST)
Duration: 6+ Contract
Role Summary
We are looking for a senior security engineer to perform advanced testing on our streaming platform and content delivery systems. The focus is on preventing piracy, testing DRM enforcement, device attestation, and ensuring CDN/WAF resilience against application-layer attacks.
Must-Have Skills / Requirements
• Strong experience in application-layer (L7) security testing
• Hands-on knowledge of CDN and WAF testing (CloudFront, Fastly, Akamai)
• Deep expertise in DRM systems: Widevine, PlayReady, FairPlay
• Experience with device ID attestation and spoofing tests
• Proficiency with reverse engineering / debugging tools (Frida, Burp Suite, mitmproxy)
• Understanding of video streaming pipelines, secure playback, and encryption
• bility to design and execute realistic attack simulations without impacting network infrastructure
Nice-to-Have Skills / Preferences
• Experience with OTT platforms or large-scale video streaming services
• Familiarity with mobile and web player security
• Knowledge of anti-piracy mechanisms and content protection best practices
• Familiarity with DRM license and key management systems
Responsibilities
• Conduct application-layer DDoS testing targeting CDN/WAF systems
• Evaluate DRM enforcement and attempt to bypass content protections
• Test device attestation mechanisms and security tier enforcement
• Provide detailed reports and actionable recommendations to protect premium content