8 months ago
Base Salary
$217k - $255k/yr
Responsibilities
- Execute red-team engagements, penetration tests, adversarial simulations, and vulnerability research across critical services, infrastructure, applications, networks, offices, and processes.
- Use threat modeling to identify threats, shape red-team priorities, validate assumptions, and articulate security risks to working groups.
- Develop tooling to automate red-team assessments and conduct exploit development using public proof-of-concept code where appropriate.
- Perform code, design, and architecture reviews and provide hardening recommendations.
- Partner with Detection and Response, physical security, engineering, and other stakeholders to improve detection, response, and remediation.
- Mentor and guide Offensive Security team members and serve as a technical advocate and security subject-matter expert.
- Lead security incidents when penetration-testing or red-team findings require them.
- Evangelize findings and projects, publish blog posts, and present at security conferences.
Requirements
- 8+ years of Red Team experience.
- Experience mentoring other team members and communicating technical findings to engineers, executives, and other audiences.
- Experience with threat modeling, black-box red-team exercises, vulnerability research, exploit development, penetration testing, code reviews, and design or architecture reviews.
- Familiarity with DNS, TCP/IP, macOS, Linux, Kubernetes, Docker, AWS, and GCP.
- Knowledge of defensive tools and techniques including IDS/IPS, packet capture, network analysis, antivirus, and EDR, including evasion techniques.
- Deep understanding of the MITRE ATT&CK Framework and strong understanding of access and identity security fundamentals.
- Comfort reading and writing Python, Go, and JavaScript.
- Ability to research and execute testing plans for new technologies or processes and experience working with distributed teams.
- Ability to document technical details and communicate effectively through Slack, JIRA Issues, GitHub issues, and email.
- Financial technology experience and experience serving as a technical lead are bonus qualifications.
Benefits
- Market-competitive compensation with bonus, equity, and benefits eligibility.
- 100% paid employee health insurance and 90% dependent coverage.
- Annual lifestyle wallet for wellness, learning, and development.
- Family-forming and fertility benefits with a lifetime maximum.
- Mental health support for employees and eligible dependents.
- Paid holidays, time off, sick time, and parental leave.
- Catered meals, stocked kitchens, and location-specific commuter benefits.
- Based in the Menlo Park, CA office with in-person attendance expected at least 3 days per week.
Tech Stack
Categories
About Robinhood
Robinhood builds a mobile-first brokerage and cash management platform for retail investors to trade stocks, ETFs, options, and cryptocurrencies, plus IRAs and a cash card. It makes money through interest on cash and margin, payment for order flow, crypto trading fees, and subscriptions like Robinhood Gold. Founded in 2013 and headquartered in Menlo Park, California, Robinhood Markets is a public company listed on Nasdaq under the ticker HOOD.