Security Engineer, Robinhood
Detection & Response
$157-185k
Offers bonus and equity
3+ days a week in office (Menlo Park, CA)
Commission-free stock trading & investing app
Be an early applicant
Commission-free stock trading & investing app
1001+ employees
Be an early applicant
$157-185k
Offers bonus and equity
3+ days a week in office (Menlo Park, CA)
1001+ employees
Company mission
To democratize finance for all.
Role
Who you are
- This role is ideal for someone who enjoys hands-on detection engineering and improving how teams respond to real-world threats!
- 2–4 years of experience in security operations, detection engineering, or incident response
- Experience analyzing logs and tuning alerts within SIEMs, EDR platforms, and cloud security tools
- Experience writing detections using query languages (e.g., SQL-like, KQL, or similar)
- Familiarity with threat hunting and investigation techniques across cloud and endpoint environments
- Ability to analyze security telemetry, identify patterns of malicious activity, and recommend practical improvements
- Clear written and verbal communication skills when documenting incidents and collaborating with technical teams
- Nice to have:
- Our ambitious roadmap requires a great culture shaped by exceptional leaders. Here’s what we expect from them:
- Experience developing and deploying SOAR playbooks to automate detection and response workflows
- Familiarity with AWS, Okta, Kubernetes, and/or Google Workspace security monitoring tools
- Experience writing software to support detection and response tooling with a focus on secure, maintainable code
- Experience in building Agentic workflows, optimizing workflows with Generative AI
What the job involves
- The Security Operations (SecOps) team works to safeguard Robinhood and its customers by identifying, investigating, and responding to security threats
- The team monitors production systems, endpoints, and cloud environments, and uses threat intelligence and structured testing to uncover risks before they affect customers
- SecOps partners closely with engineering and infrastructure teams to strengthen detection coverage and response readiness
- The team’s focus is clear: reduce risk, improve visibility, and protect customer trust every day!
- As a Security Engineer, Detection & Response, you will strengthen Robinhood’s ability to detect, investigate, and contain security incidents
- You will design and improve detection logic, analyze security telemetry across cloud and endpoint systems, and contribute to measurable reductions in false positives and detection gaps
- You will work directly with SOC analysts and security engineers to refine investigation workflows and document incident findings
- Investigate security alerts across SIEM, EDR, and cloud security platforms, perform log analysis, and coordinate containment or remediation steps with engineering partners
- Develop, test, and tune detection rules using query languages to improve signal quality and reduce false positives
- Correlate data from multiple telemetry sources to identify attack patterns and determine appropriate response actions
- Monitor emerging threats and update detection logic based on investigation findings and threat intelligence reporting
- Contribute to automation efforts by building or refining SOAR playbooks and scripts that improve investigation speed and consistency
- Document incidents and contribute to post-incident reviews with clear findings and recommended improvements to detection and response processes
Our take
For years, traditional brokers ruled the share trading realm, charging hefty fees that locked out everyday investors. Robinhood emerged as a disruptor, offering commission-free trading and opening the door to a new generation. Since then, expectations have continued to evolve, with investors looking not just to lower costs, but for simpler tools, clearer information, and guidance that makes the market easier to understand.
Robinhood was built to meet those changing expectations, designed from the start as a mobile-first platform that makes investor more accessible and less intimidating for people at every stage of their financial journey. Through its app, users can trade stocks and other financial instruments while benefiting from a clean interface and built-in educational support, helping them move from curiosity to confidence without unnecessary complexity.
Recently, Robinhood has strenghtned its impact too, particularly in the UK. With the launch of AI-powered Digests within its Robinhood Cortex assistant that helps users understand what's driving stock movements in plain English, while upcoming options trading and expanded educational resources add flexibility and depth. Together, these steps position Robinhood as a platform evolving alongside its users, blending technology and education to stay ahead in an ever-changing investment landscape.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 13 rounds)
Feb 2021
$2.4bn
CONVERTIBLE
Jan 2021
$1bn
LATE VC
Total funding: $5.6bn
Company HQ
Downtown Menlo Park, Menlo Park, CA
Leadership
Vlad Tenev
(Co-Founder, CEO & Chairman)Studied Mathematics at Stanford University, where they met Baiju. Dropped out of a PhD to start Robinhood. Alongside Robinhood, Vlad is also the co-founder and Executive Chairman of Harmonic.
Baiju B.
(Co-Founder)Studied Mathematics and Physics at Stanford University, where they met their Vlad and co-founded Robinhood in 2012. Baiju is also the Founder and CEO of Aetherflux.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 89 more jobs at Robinhood