Base Salary
$197k - $243k/yr
Responsibilities
- Conduct full-stack offensive security assessments across web applications, APIs, cloud infrastructure, and backend systems.
- Partner with detection engineers through purple team exercises, attack simulations, and threat emulation to improve detection coverage.
- Create and maintain security testing tools, BAS frameworks, and automation scripts for repeatable testing.
- Design and implement metrics frameworks measuring security control effectiveness, detection coverage, and improvement over time.
- Research evolving attack techniques, tools, and methodologies and contribute to offensive and defensive security improvements.
- Share security knowledge across teams and collaborate with architecture, engineering, and external engineering partners.
Requirements
- At least four years of relevant professional experience in offensive security, including purple team exercises, breach attack simulation, and collaboration with detection engineering teams.
- Proficiency in Python or Go for security tooling and automation, including experience with SOAR platforms and configuration management.
- Experience performing full-stack security assessments of web applications, APIs, cloud infrastructure, and backend systems.
- Experience implementing and managing breach attack simulation platforms and validating detection coverage.
- Deep knowledge of OWASP Top 10 vulnerabilities, attack techniques, exploit development, post-exploitation, MITRE ATT&CK, PTES, BAS methodologies, EDR, SIEM, and XDR.
- Knowledge of reverse engineering, cloud security across AWS, Azure, and GCP, container security, CI/CD pipeline security, API security, and security metrics development.
- Certifications such as OSCP, OSCE, or GXPN, or equivalent practical experience.
- Strong analytical, problem-solving, technical writing, communication, collaboration, and organizational abilities.
Benefits
- Full-time employees are eligible for equity compensation and benefits.
- Office-based roles are onsite Tuesday, Wednesday, and Thursday, with optional presence Monday and Friday.
- The role is based at the headquarters in San Mateo, California.
About Roblox
Roblox's vision is to reimagine the way people come together. Our mission is to connect a billion people with optimism and civility. What is Roblox? Roblox is a platform where people come together virtually to share experiences. Every day, tens of millions of people from around the world come to Roblox to learn, work, play, connect, communicate, and socialize in immersive digital experiences all built by a global community of creators. Powered by Creators Roblox is powered by a global community of millions of developers and creators who produce their own immersive multiplayer experiences each month using Roblox Studio, our intuitive desktop design tool. Any experience imaginable can be created on Roblox. How Popular? Roblox is ranked as one of the top entertainment platforms for audiences under the age of 18 based on average monthly visits and time spent (Comscore). Our popularity is driven purely by the community with millions of people signing up through word of mouth every month.