Senior Security Software Engineer, Infrastructure Security

About the role

In this pivotal position, you will join Roblox's Information Security team, contributing to the enhancement of Platform Security. Reporting directly to the Senior Manager of Infrastructure Security, your role will involve collaborating with various teams, including Production IAM, Network Security, and Cloud Security. Your expertise will be crucial in identifying vulnerabilities and implementing robust security measures to protect Roblox's infrastructure.

Key facts

What you'll do

• Analyze and identify security vulnerabilities within both cloud and on-premise infrastructures, working alongside Governance Risk and Compliance teams to establish necessary standards and policies that align with regulatory requirements.
• Strengthen the security posture of our infrastructure by implementing secure-by-default configurations and guidelines for developers across Roblox.
• Take ownership of solutions that empower Roblox engineers to securely design, build, and utilize infrastructure at scale.
• Collaborate closely with various InfoSec teams, such as Application Security, Data & Risk, Governance Risk & Compliance, Corporate Security, Cloud Security, and Network Security, ensuring that security measures align with product development initiatives.
• Engage in the continuous improvement of security practices by integrating feedback from security assessments and audits into the development lifecycle.
• Develop and maintain documentation related to security policies, procedures, and best practices to ensure clarity and compliance across the organization.
• Participate in incident response activities, providing expertise in security incidents and contributing to post-incident reviews to enhance future security measures.
• Stay updated with the latest security trends, threats, and technologies, applying this knowledge to improve Roblox's security framework.

Requirements

• A minimum of 5 years of experience in software engineering or a related technical field, with a strong emphasis on security.
• Proficiency in automation, Infrastructure as Code (IaC), system hardening, container security, and cloud security policies.
• Extensive knowledge of Linux systems, Kubernetes (including EKS, GKE, AKS, and RKS), and both on-premise and cloud-based security infrastructures.
• Familiarity with Public Key Infrastructure (PKI), data encryption methods (both at rest and in transit), and best practices in platform security.
• Experience with secrets management and orchestration tools such as Chef, Nomad, and ECS.
• A solid understanding of network and application security principles, as well as industry best practices in information security.

Nice to have

• Experience with security frameworks and compliance standards such as ISO 27001, NIST, or SOC 2.
• Knowledge of threat modeling and risk assessment methodologies.
• Familiarity with security tools and technologies for vulnerability scanning and penetration testing.
• Experience working in a DevOps or Agile environment, facilitating security integration into the development process.

Skills & tools

• Proficient in programming languages such as Python, Go, or Java.
• Familiarity with cloud platforms like AWS, Azure, or Google Cloud.
• Strong analytical and problem-solving skills, with the ability to think critically about security challenges.
• Excellent communication skills, capable of conveying complex security concepts to both technical and non-technical stakeholders.

Practical notes

For positions based at our headquarters in San Mateo, CA, the starting base salary for this role ranges from $233,570 to $269,170 USD. Actual compensation may vary based on factors such as experience, qualifications, and market demand. All full-time employees are also eligible for equity compensation and comprehensive benefits.

Roblox is committed to providing equal employment opportunities to all candidates and employees, ensuring a workplace free from discrimination and harassment. We also offer reasonable accommodations for individuals with disabilities or religious beliefs during the recruitment process.

Please note that for U.S.-based roles, the company may not be able to hire candidates requiring specific U.S. work authorization or support future H-1B sponsorship for this position.

Join us at Roblox, where you will be part of a mission to connect a billion people through innovative digital experiences, while ensuring a secure and safe environment for our community.

About the company

An online space lets people build and play games. Founded long ago by two creators, it grew into a shared world opened to everyone in the mid 2000s. Now reaching millions each day, it hosts games made by its users. A large share of young American children under sixteen are monthly players here. High daily activity shows a lasting community where creativity and shared play remain central.