Responsibilities
- Design, write, and maintain production-quality detections, automations, integrations, SOAR playbooks, and data and enrichment pipelines.
- Develop and improve SIRT/SOC tooling, alert enrichment, case-management integrations, and follow-the-sun handoff automation.
- Serve as the primary incident commander and senior security engineering point of contact for the European time zone.
- Shape the technical strategy and architecture of the detection and response engineering function.
- Lead serious security incidents, major vulnerabilities, and platform-wide responses through mitigation and post-incident improvement.
- Conduct forensic investigations and proactive threat hunting to identify anomalous activity and threats.
- Collaborate with Security, Engineering, Legal, HR, executives, external partners, developers, and customers.
- Travel semi-regularly to the United States to align with headquarters and central security and engineering leadership.
Requirements
- 10+ years of experience across security engineering, information security, IT, infrastructure/SRE, and/or incident response.
- 7+ years specifically focused on detection or response, including building detections, automation, or security tooling.
- Ability to write and review production-quality scripting and build automations, integrations, and data pipelines.
- Proven ability to operate independently, make critical business-impacting decisions, and lead distributed or satellite-office teams.
- Extensive experience serving as an incident commander and coordinating responders while communicating with leadership.
- Expert-level experience investigating threats in enterprise and production environments from identification through resolution.
- Deep knowledge of SIEM, EDR, IDS/IPS, NDR, SOAR, public cloud, operating systems, virtualization, containerization, networking, build/development infrastructure, and hardware.
- Experience applying the NIST Incident Response Lifecycle, Cyber Kill Chain, and MITRE ATT&CK to real-world scenarios.
- Bachelor’s degree in computer science, cybersecurity, or a related technical field; an advanced degree is preferred, or equivalent experience may substitute.
Benefits
- London, UK office-based role with a dedicated private workspace in a shared office environment
- Onsite Tuesday through Thursday, with optional presence Monday and Friday
- Semi-regular travel to the USA to visit headquarters
Categories
About Roblox
Roblox's vision is to reimagine the way people come together. Our mission is to connect a billion people with optimism and civility. What is Roblox? Roblox is a platform where people come together virtually to share experiences. Every day, tens of millions of people from around the world come to Roblox to learn, work, play, connect, communicate, and socialize in immersive digital experiences all built by a global community of creators. Powered by Creators Roblox is powered by a global community of millions of developers and creators who produce their own immersive multiplayer experiences each month using Roblox Studio, our intuitive desktop design tool. Any experience imaginable can be created on Roblox. How Popular? Roblox is ranked as one of the top entertainment platforms for audiences under the age of 18 based on average monthly visits and time spent (Comscore). Our popularity is driven purely by the community with millions of people signing up through word of mouth every month.