Senior Security Engineer, Robinhood

• 5+ years of experience in Detection & Response, Incident Response, or Security Operations
• Proven Command Presence: Demonstrated success leading complex incident responses under pressure with clear, action-oriented executive communication
• Deep Cloud & Infrastructure Expertise: Advanced technical experience securing cloud environments with a focus on Kubernetes
• Code Reasoning Skills: Ability to fluently read, analyze, and reason through code across multiple programming languages to solve complex security challenges
• Detection Engineering Mastery: Track record of designing, tuning, and operating scalable detection engineering pipelines and SOAR playbooks, as well as leveraging AI technologies to improve speed, scale, and quality
• AI Experience: Hands-on experience designing and implementing agentic AI workflows for security operations
• Agility: Ability to thrive in high-growth, fast-paced environments with evolving threat landscapes

Desirable

• The Security Operations (SecOps) team at Robinhood proactively safeguards our platform and millions of customers
• We monitor, detect, and respond to security threats in real time while staying ahead of risks through threat intelligence, Red Team operations, and research partnerships
• We are building the next generation of security operations—leveraging AI-driven automation, Autonomic Security Operations (ASO), and innovative detection frameworks to set the standard across the cybersecurity industry!
• As a Senior Security Engineer (IC5) on the Detection & Response team, you will drive our incident response strategy and build robust detection engineering frameworks
• In this high-impact role, you will command high-stress incident responses, eliminate operational noise by developing an AI-native detection platform, and help shape the broader AI-agentic ecosystem for SecOps
• You will work closely with cross-functional partners in Proactive Security, Security Engineering, Insider Trust, Infrastructure, Legal, and Communications to protect Robinhood’s ecosystem
• Lead Incident Response: Command security incident response workstreams with decisive leadership, rapidly containing threats, quantifying impact, and communicating effectively with leadership
• Elevate Detection Rigor: Build, tune, and maintain our global detection catalog across our cloud and kubernetes environments to ensure high precision and actionable alerting
• Drive Strategic Innovation: Architect our Autonomic Security Operations (ASO) roadmap, integrating AI agents and automated issue discovery to transform response capabilities
• Code & Architecture Analysis: Read and reason through complex, multi-language codebases to identify security vulnerabilities, evaluate threat vectors, and guide remediation
• On-Call Support: Participate in an on-call rotation (1 week per rotation) to maintain real-time operational readiness