Senior Offensive Security Engineer

Roblox
San Mateo
Workplace: OnsiteFull timeUSD 196,750 - 243,290 annuallyFunction: CybersecurityExperience: 4+ yearsSkills: ["Analytical thinking","Problem-solving","Technical writing","Communication","Self-motivated"]

Own offensive security assessments within Roblox’s Detection and Response team (DART), partnering with detection engineers and InfoSec to identify weaknesses and validate detection coverage. Develop and maintain security testing tooling, purple-team and breach-attack simulation frameworks, and metrics to quantify improvements over time. Perform full-stack assessments across web apps, APIs, cloud infrastructure, and backend systems while translating findings into actionable recommendations.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Roblox
Roblox
1 month ago

Senior Offensive Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 5 hours agoStatus: Live

Job Summary

Own offensive security assessments within Roblox’s Detection and Response team (DART), partnering with detection engineers and InfoSec to identify weaknesses and validate detection coverage. Develop and maintain security testing tooling, purple-team and breach-attack simulation frameworks, and metrics to quantify improvements over time. Perform full-stack assessments across web apps, APIs, cloud infrastructure, and backend systems while translating findings into actionable recommendations.
Location: San Mateo
Workplace: Onsite
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Conduct offensive security assessments across web applications, APIs, cloud infrastructure, and backend systems.
  • •Collaborate with detection engineers using purple team exercises, attack simulations, and threat emulation to improve detection coverage.
  • •Develop custom security testing tools, BAS frameworks, and automation scripts to enable repeatable testing and measurable improvements.
  • •Design and implement security metrics frameworks to measure security control effectiveness and detection coverage over time.
  • •Stay current on attack techniques, tools, and methodologies and contribute to both offensive and defensive security improvements.

Pay and Benefits

Salary: USD 196,750 - 243,290 annually
Perks:Equity

Key Requirements

  • •4+ years of offensive security experience, including purple team exercises, breach attack simulation, and collaboration with detection engineering.
  • •Proficiency in Python or Go for building security tooling and automation, including SOAR platforms and configuration management.
  • •Ability to perform full-stack security assessments of web applications, APIs, cloud infrastructure, and backend systems.
  • •Experience implementing and managing breach attack simulation platforms to validate and improve detection coverage with detection engineers.
  • •Deep knowledge of OWASP Top 10, exploit development and post-exploitation, and frameworks/methodologies such as MITRE ATT&CK and PTES; certifications like OSCP/OSCE/GXPN or equivalent practical experience.
Experience:4+ years
Skills:Analytical thinkingProblem-solvingTechnical writingCommunicationSelf-motivated
Certifications:OSCPOSCEGXPN
Languages:English
Tech Stack:PythonGoSOARConfiguration managementOWASP Top 10MITRE ATT&CKPTESBASEDRSIEMXDRReverse engineeringAWSAzureGCPContainer securityCI/CDAPI securitySecurity metrics developmentOpen Source

Company Brief

Roblox
Operates an online platform for user-generated games and virtual experiences, enabling creators to build, publish, and monetize interactive 3D experiences for a global community of players.
Industry: Gaming
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: San Mateo, United States
Founded: 2004
WebsiteLinkedIn