Senior Security Engineer, Roblox
Detection and Response
More information about location
3-5 days a week in office
Online gaming & entertainment platform
Open for applications
Online gaming & entertainment platform
1001+ employees
Open for applications
More information about location
3-5 days a week in office
1001+ employees
Company mission
To connect a billion people with optimism and civility.
Role
Who you are
- Experience: 10+ years across security engineering, Infosec, IT, Infra/SRE, and/or Incident Response
- Specialization: 7+ years specifically in Detection or Response, with a track record of building, writing detections, automation or security tooling, not solely operating
- Engineering Proficiency: Comfortable writing and reviewing production-quality code (Scripting) and building automations, integrations and data pipelines that others depend on
- Autonomous Leadership: Proven ability to work independently in satellite offices or distributed teams. You are comfortable being the "person in charge" during your shift and making calls that impact the business
- Incident Command: Extensive experience operating as an incident commander. You can flex into deep engineering work but also possess the executive presence to coordinate responders and communicate status to leadership
- Investigations: Expert-level capability investigating threats in enterprise and production environments, taking ownership from identification to resolution
- Knowledge/Tools/Techniques: Deep understanding of security tooling (SIEM, EDR, IDS/IPS, NDR, SOAR) and experience extending or building on it
- You are proficient in applying Incident Response frameworks (NIST IR Lifecycle, Cyber Kill Chain, MITRE ATT&CK) to real-world scenarios, and you collaborate effectively with engineering colleagues, leveraging extensive expertise across infrastructure and technologies (Public Cloud, OS, Virtualization, Containerization, Networking, Build/Development infrastructure, and Hardware)
- Education: Bachelor's degree in Computer Science, Cybersecurity, or a related technical field; advanced degree preferred or equivalent experience
- A Builder-Operator: You would rather automate a problem out of existence than staff around it and you hold yourself to an engineering bar even under incident pressure
- A Strategic Self-Starter: You don't wait for instructions. You identify gaps in coverage — especially those unique to regional or time-zone-specific challenges — and fix them
- A Detailed Thinker: You enjoy exploring the details and considering the second- and third-order effects of your decisions
- An Eager Problem Solver: You are drawn to complex issues rather than avoidant of them
- Emboldened to Make Change: You instinctively ask what you can do to improve the situation rather than waiting to be prompted
- Compelled by our Mission: You are driven by the opportunity to protect our community and the safe space we've created
- A Calculated Risk Taker: You move fast, navigating reasonable risks to take action and build capabilities as quickly as possible
What the job involves
- As a founding member of the Security Operations team in EMEA, you will join us at an exciting time in Roblox’s SIRT & SOC program
- You will design and build the detections, automation and tooling that let a lean team monitor and protect players, developers, employees and the platform at global scale and serve as security incident commander in the region
- This is a highly autonomous role where you will be a primary decision-maker, core to our mission to maintain a highly capable 24/7/365 monitoring and response capability
- While you will work in close collaboration with peers at our US West Coast Headquarters, the time difference requires an engineer who can operate independently, making critical decisions without immediate oversight
- We favor engineering our way out of toil through automation, orchestration, detections-as-code, and risk-based prioritization, while retaining the deep technical skills required to conduct detailed, hands-on analysis and lead response end-to-end when the situation warrants
- You will be working from a dedicated, private space located within a shared office environment, designed to enable collaboration while remaining secure
- Build Detection & Response Systems: Design, write, and maintain production-quality detections, automations and integrations (detections-as-code, SOAR playbooks, data and enrichment pipelines) that scale our monitoring capability and reduce manual toil
- Own Tooling & Platform: Develop and improve the tooling the global SIRT/SOC depends on alert quality and enrichment, case-management integrations and automation that powers reliable "follow-the-sun" hand-offs
- Exercise High Autonomy: Act as the primary Incident Commander for the European time zone, making critical, time-sensitive decisions independently before US HQ comes online
- You will serve as the senior-most security engineering point of contact in the region
- Drive Strategy & Architecture: Shape the technical direction of the detection & response engineering function, specifically architecting how global hand-offs and "follow-the-sun" models can be optimized and automated
- Command Security Incidents: Ensure serious threats and impacts are understood, mitigated, and learned from with speed and professionalism, often leading responses end-to-end without immediate escalation paths during local hours — and turning what you learn into durable, automated detections
- Conduct Forensic Investigations & Threat Hunt: Dig into complex context to determine whether threats exist, take decisive action and proactively hunt for anomalous activity in our signals, distinguishing outliers from threats
- Lead High-Profile Responses: Collaborate with Security and Engineering to lead responses to major vulnerabilities or platform-wide events
- Collaborate Cross-Functionally: Work with Legal, HR, Executive teams, and external partners (Developers & Customers). You will also travel semi-regularly to the USA to visit HQ, ensuring deep alignment with central engineering and security leadership
Salary benchmarks
Our take
Online gaming may be a well-established space, but Roblox has distinguished itself as a leader by empowering its community to build, share, and profit from their own creations - turning game development into an accessible, rewarding ecosystem for millions of users.
In addition to standard games, the platform offers virtual worlds and other experiences to explore and interact with. Its platform provides an online ecosystem for millions to create, socialize, chat, and explore immersive experiences with friends. In fact, in the US its used by two-thirds of children aged 9 to 12.
The platform has faced scrutiny over user safety, but responded by strengthen parental controls and launching initiatives like its "Parents Council". This move to address these issues, atop its strong financial performance and record payouts to developers, showcase Roblox's trajectory as one of innovation and impressive growth.
Freddie
Company Specialist at Welcome to the Jungle
Insights
25% employee growth in 12 months
Company
Funding (last 2 of 9 rounds)
Jan 2021
$520m
SERIES H
Feb 2020
$150m
SERIES G
Total funding: $922.8m
Company HQ
South San Mateo, San Mateo, CA
Leadership
David Baszucki
(Founder & CEO)Studied Electrical Engineering at Stanford before founding Knowledge Revolution in 1990, where they spent 9 years as CEO. They worked as VP of MSC.Software for 2 years, and started Roblox in 2005.
Share this job
View 159 more jobs at Roblox