Security Engineer, Robinhood
Vulnerability Management
CA$114.8-135k
This role is also eligible to participate in a Robinhood bonus plan and Robinhood’s equity plan
Commission-free stock trading platform
Be an early applicant
Commission-free stock trading platform
1001+ employees
Be an early applicant
CA$114.8-135k
This role is also eligible to participate in a Robinhood bonus plan and Robinhood’s equity plan
1001+ employees
Company mission
To democratize finance for all.
Role
Who you are
- 3+ years of full-time software development experience with a proven track record of developing scalable, modular, and reliable systems
- Experience as a Bug Bounty researcher, familiarity with the Bug Bounty and vulnerability disclosure process
- Experience in the technical triage of vulnerabilities, including a thorough understanding of attack surface, CVSS and other severity rating approaches, as well as exploitability and mitigating controls
- A track record of successfully collaborating with cross-functional teams
- Experience with reading and working on large Go or Python codebases
- Experience with scripting and task automation through code
- Experience with vulnerability management tools and automated vulnerability scanners such as EndorLabs, Snyk, Semgrep, Trufflehog, Wiz, Assetnote, Nuclei, etc
- An understanding of the unique challenges in securing cloud environments
- Bonus points for experience at a fintech or a company in other highly regulated spaces
What the job involves
- The Security Operation team’s mission is to protect Robinhood and its customers by rapidly anticipating, detecting and responding to security threats, while continuously assuring and strengthening our defenses to minimize the impact of risks and ensure business continuity
- As a Vulnerability Management Security Engineer, you will be at the forefront of safeguarding our organization by identifying and mitigating critical vulnerabilities before they can be exploited
- You'll play a hands-on role in our dynamic cybersecurity ecosystem, tackling complex challenges and working with the latest tools and technologies to stay one step ahead of potential threats
- Support the Vulnerability Management system at Robinhood, taking ownership for the lifecycle of vulnerabilities, and improving the company’s security posture
- Own the end to end Bug Bounty report lifecycle from triage to resolution, including managing triage and escalation for inbound reports, performing root cause analysis, managing state transitions, and tracking internal remediation tickets
- Empower the Vulnerability Management program to scale by improving automated triage for vulnerability findings
- Build automated remediation for identified vulnerabilities whenever possible, such as remediating outdated package dependencies
- Design clear and intuitive dashboards for a single-pane-of-glass overview of the state of Vulnerability Management
Our take
For years, traditional brokers ruled the share trading realm, charging hefty fees that locked out everyday investors. Robinhood emerged as a disruptor, offering commission-free trading and opening the door to a new generation. Its innovative model thrives on premium features like increased buying power and extended trading hours, attracting a younger audience drawn to meme stocks like AMC and GameStop.
But Robinhood's not just about quick thrills. The company claims its mission lies in catering to "the unmet needs of the next generation," evidenced by its "Robinhood Retirement" launch, targeting gig-economy workers often excluded from financial planning. This commitment to accessibility aligns with its core values.
However, 2023 brought unexpected turbulence, as Robinhood became entangled in the FTX cryptocurrency exchange bankruptcy scandal when it emerged that the US Department of Justice seized hundreds of millions of dollars of the company's shares tied to FTX founder Bankman-Fried. Despite these challenges, Robinhood successfully bought back the missing stock, and its impact on democratizing finance remains undeniable.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
Some candidates hear
back within 2 weeks
39% female employees
-23% employee growth in 12 months
Company
Funding (last 2 of 13 rounds)
Feb 2021
$2.4bn
CONVERTIBLE
Jan 2021
$1bn
LATE VC
Total funding: $5.6bn
Company benefits
- Well-being - Premium medical, dental, and vision insurance
- Family & home life - Parental leave, personal prosperity benefits
- Comfort & care - Annual lifestyle stipend
- Office life - Catered meals and fully stocked kitchen, commuter benefits
- Growth - Education and training, community events, career mentorships
Company values
- Safety First: Robinhood is a safety-first company
- Participation is Power: At Robinhood, the rich don’t get a better deal
- Radical Customer Focus: We exist to make our customers happy
- First-Principles Thinking: We make bold bets and challenge the status quo
Company HQ
Downtown Menlo Park, Menlo Park, CA
Articles
Leadership
Vlad Tenev
(Co-Founder)Studied Mathematics at Stanford University, where they met their fellow co-founder. Dropped out of a PhD to start Robinhood.
Baiju B.
(Co-Founder)Studied Mathematics and Physics at Stanford University, where they met their fellow co-founder.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 76 more jobs at Robinhood