3 months ago
London, United KingdomSenior
Responsibilities
- Design, write, and maintain production-quality detections, automations, integrations, SOAR playbooks, and data and enrichment pipelines.
- Develop and improve SIRT/SOC tooling, alert enrichment, case-management integrations, and follow-the-sun handoff automation.
- Serve as the primary incident commander and senior security engineering point of contact for the European time zone.
- Shape the technical strategy and architecture of the detection and response engineering function.
- Lead serious security incidents, major vulnerabilities, and platform-wide responses through mitigation and post-incident improvement.
- Conduct forensic investigations and proactive threat hunting to identify anomalous activity and threats.
- Collaborate with Security, Engineering, Legal, HR, executives, external partners, developers, and customers.
- Travel semi-regularly to the United States to align with headquarters and central security and engineering leadership.
Requirements
- 10+ years of experience across security engineering, information security, IT, infrastructure/SRE, and/or incident response.
- 7+ years specifically focused on detection or response, including building detections, automation, or security tooling.
- Ability to write and review production-quality scripting and build automations, integrations, and data pipelines.
- Proven ability to operate independently, make critical business-impacting decisions, and lead distributed or satellite-office teams.
- Extensive experience serving as an incident commander and coordinating responders while communicating with leadership.
- Expert-level experience investigating threats in enterprise and production environments from identification through resolution.
- Deep knowledge of SIEM, EDR, IDS/IPS, NDR, SOAR, public cloud, operating systems, virtualization, containerization, networking, build/development infrastructure, and hardware.
- Experience applying the NIST Incident Response Lifecycle, Cyber Kill Chain, and MITRE ATT&CK to real-world scenarios.
- Bachelor’s degree in computer science, cybersecurity, or a related technical field; an advanced degree is preferred, or equivalent experience may substitute.
Benefits
- London, UK office-based role with a dedicated private workspace in a shared office environment
- Onsite Tuesday through Thursday, with optional presence Monday and Friday
- Semi-regular travel to the USA to visit headquarters
Categories
About Roblox
Roblox builds a platform for user‑generated 3D experiences, offering Roblox Studio for creators and a social marketplace where players explore and interact across devices. Its business model centers on virtual currency (Robux) and subscriptions, platform fees paid to creators, and an expanding advertising offering. Founded in 2004 and headquartered in San Mateo, California, Roblox Corporation is publicly traded on the NYSE under the ticker RBLX.