Senior Offensive Security Engineer, Roblox
$233.8-283.8k
Eligible for equity compensation
More information about location
3-5 days a week in office (San Mateo, CA)
Online gaming & entertainment platform
Be an early applicant
Online gaming & entertainment platform
1001+ employees
Be an early applicant
$233.8-283.8k
Eligible for equity compensation
More information about location
3-5 days a week in office (San Mateo, CA)
1001+ employees
Company mission
To help connect and bring together people from around the world through play.
Role
Who you are
- 7+ years: professional experience in offensive security, with demonstrated experience in purple team exercises, breach attack simulation, and detection engineering teamwork
- Development experience: proficiency in Python or Go for building security tooling and automation, including experience with SOAR platforms and configuration management
- Security assessment expertise: performing full-stack security assessments of web applications, APIs, cloud infrastructure, and backend systems
- Platform expertise: implementing and managing breach attack simulation platforms while working with detection engineering teams to validate and improve detection coverage
- Deep understanding: of OWASP Top 10 vulnerabilities; common attack techniques; exploit development; post-exploitation methodologies; security assessment frameworks (MITRE ATT&CK, PTES); BAS methodologies; and modern detection stack components (EDR, SIEM, XDR)
- Knowledge: of security concepts including reverse engineering, cloud security (AWS/Azure/GCP), container security, CI/CD pipeline security, API security, and security metrics development
- Certifications: such as OSCP, OSCE, GXPN, or equivalent practical experience
- Interpersonal skills: strong analytical and problem-solving abilities; excellent technical writing for detailed reports; ability to clearly communicate complex technical concepts; self-motivated with a passion for offensive security and detection engineering
What the job involves
- As an Offensive Security Engineer within the Detection and Response team (DART), you'll lead offensive security assessments that strengthen our defense capabilities
- Working closely with the larger InfoSec team, detection engineers, and external engineering partners, you'll identify security weaknesses, validate detection mechanisms, and provide actionable recommendations to enhance our security posture
- You'll collaborate with various architecture and engineering teams to continuously validate and improve our security controls and detection capabilities, with a strong focus on developing repeatable testing frameworks and metrics-driven security improvements
- Lead offensive security assessments: conduct full-stack security assessments across our entire technology stack
- Drive detection engineering partnerships: collaborate with detection engineers through purple team exercises, attack simulations, and threat emulation to improve detection coverage
- Develop custom tools and frameworks: build and maintain security testing tools, BAS frameworks, and automation scripts that enable repeatable testing and quantifiable security improvements
- Build security metrics: design and implement frameworks to measure security control effectiveness, detection coverage, and improvement over time through consistent testing methodologies
- Research and innovate: stay current with the latest attack techniques, tools, and methodologies while building out both offensive and defensive security improvements
- Mentor and collaborate: share knowledge across security teams and foster a culture of continuous security improvement
Our take
While online gaming is no longer a revolutionary concept, Roblox has established itself as a leader in the industry by creating a gaming toolbox that encourages quality game creation, which it pays developers for.
In addition to standard games, the platform offers virtual worlds and other experiences to explore and interact with. Its platform provides an online ecosystem for millions to create, socialize, chat, and explore immersive experiences with friends. In fact, in the US its used by two-thirds of children aged 9 to 12.
The experiences on the platform are made by Roblox's over three million creators, and are available on a range of devices from PC to Xbox to Oculus, and more. The company has grown at an impressive rate, and has been keen to adopt new developments in the tech world, for example with its real-time AI translation for players to interact outside their native tongue.
Freddie
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 9 rounds)
Jan 2021
$520m
SERIES H
Feb 2020
$150m
SERIES G
Total funding: $922.8m
Company benefits
- Medical, dental, and vision coverage
- 401k
- Flexible vacation policy
- Roflex - Flexible and supportive work policy
- Roblox Admin badge for your avatar
- Free catered lunches five times a week and several fully stocked kitchens with unlimited snacks
- Onsite fitness center and fitness program credit
- Annual CalTrain Go Pass
Company HQ
South San Mateo, San Mateo, CA
Articles
Leadership
David Baszucki
(CEO)Studied Electrical Engineering at Stanford before founding Knowledge Revolution in 1990, where they spent 9 years as CEO. They worked as VP of MSC.Software for 2 years, and started Roblox in 2005.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 158 more jobs at Roblox