3 months ago
San Mateo, CA, USASenior
Base Salary
$197k - $243k/yr
Responsibilities
- Conduct full-stack offensive security assessments across web applications, APIs, cloud infrastructure, and backend systems.
- Partner with detection engineers through purple team exercises, attack simulations, and threat emulation to improve detection coverage.
- Create and maintain security testing tools, BAS frameworks, and automation scripts for repeatable testing.
- Design and implement metrics frameworks measuring security control effectiveness, detection coverage, and improvement over time.
- Research evolving attack techniques, tools, and methodologies and contribute to offensive and defensive security improvements.
- Share security knowledge across teams and collaborate with architecture, engineering, and external engineering partners.
Requirements
- At least four years of relevant professional experience in offensive security, including purple team exercises, breach attack simulation, and collaboration with detection engineering teams.
- Proficiency in Python or Go for security tooling and automation, including experience with SOAR platforms and configuration management.
- Experience performing full-stack security assessments of web applications, APIs, cloud infrastructure, and backend systems.
- Experience implementing and managing breach attack simulation platforms and validating detection coverage.
- Deep knowledge of OWASP Top 10 vulnerabilities, attack techniques, exploit development, post-exploitation, MITRE ATT&CK, PTES, BAS methodologies, EDR, SIEM, and XDR.
- Knowledge of reverse engineering, cloud security across AWS, Azure, and GCP, container security, CI/CD pipeline security, API security, and security metrics development.
- Certifications such as OSCP, OSCE, or GXPN, or equivalent practical experience.
- Strong analytical, problem-solving, technical writing, communication, collaboration, and organizational abilities.
Benefits
- Full-time employees are eligible for equity compensation and benefits.
- Office-based roles are onsite Tuesday, Wednesday, and Thursday, with optional presence Monday and Friday.
- The role is based at the headquarters in San Mateo, California.
About Roblox
Roblox builds a platform for user‑generated 3D experiences, offering Roblox Studio for creators and a social marketplace where players explore and interact across devices. Its business model centers on virtual currency (Robux) and subscriptions, platform fees paid to creators, and an expanding advertising offering. Founded in 2004 and headquartered in San Mateo, California, Roblox Corporation is publicly traded on the NYSE under the ticker RBLX.