Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences- all created by our global community of developers and creators. At Roblox, we’re building the tools and platform that empower our community to bring any experience that they can imagine to life. We’re on a mission to connect a billion people with optimism and civility, and looking for amazing talent to help us get there. A career at Roblox means you’ll be working to shape the future of human interaction, solving unique technical challenges at scale, and helping to create safer, more civil shared experiences for everyone.As an Offensive Security Engineer within the Detection and Response team (DART), you'll lead offensive security assessments that strengthen our defense capabilities. Working closely with the larger InfoSec team, detection engineers, and external engineering partners, you'll identify security weaknesses, validate detection mechanisms, and provide actionable recommendations to enhance our security posture. You'll collaborate with various architecture and engineering teams to continuously validate and improve our security controls and detection capabilities, with a strong focus on developing repeatable testing frameworks and metrics-driven security improvements.You Will:Lead offensive security assessments: conduct full-stack security assessments across our entire technology stack.Drive detection engineering partnerships: collaborate with detection engineers through purple team exercises, attack simulations, and threat emulation to improve detection coverage.Develop custom tools and frameworks: build and maintain security testing tools, BAS frameworks, and automation scripts that enable repeatable testing and quantifiable security improvements.Research and innovate: stay current with the latest attack techniques, tools, and methodologies while building out both offensive and defensive security improvements.Development experience: proficiency in Python or Go for building security tooling and automation, including experience with SOAR platforms and configuration management.Security assessment expertise: performing full-stack security assessments of web applications, APIs, cloud infrastructure, and backend systems.Platform expertise: implementing and managing breach attack simulation platforms while working with detection engineering teams to validate and improve detection coverage.Knowledge: of security concepts including reverse engineering, cloud security (AWS/Azure/GCP), container security, CI/CD pipeline security, API security, and security metrics development.excellent technical writing for detailed reports; The actual base pay is dependent upon a variety of job-related factors such as professional background, training, work experience, location, business needs and market demand. All full-time employees are also eligible for equity compensation and for benefits.Annual Salary Range$233,840—$283,780 USDRoles that are based in our San Mateo, CA Headquarters are in-office Tuesday, Wednesday, and Thursday, with optional in-office on Monday and Friday (unless otherwise noted).You’ll Love: Industry-leading compensation packageExcellent medical, dental, and vision coverageA rewarding 401k programFlexible vacation policy (varies by exemption status)Roflex - Flexible and supportive work policy Roblox Admin badge for your avatarAt Roblox HQ: Free catered lunches five times a week and several fully stocked kitchens with unlimited snacksOnsite fitness center and fitness program creditAnnual CalTrain Go PassRoblox provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
