Senior Detection and Response Engineer

As a Senior Security Engineer on the Detection and Response (D&R) team at Roblox, you’ll protect a community of hundreds of millions of monthly users alongside the underlying platform infrastructure. You’ll design high-fidelity detections, engineer security data platforms, and respond alongside the team during incidents. This is a hybrid in-office role in San Mateo.

• Deliver robust D&R capabilities: Engineer high-fidelity detections end-to-end from threat modeling through production quality alerts and actionable investigations, while keeping false positives low.
• Correlate and automate: Apply the right tool for the job (be it rules, statistical modeling, traditional ML, or LLM agentic workflows) to filter, triage, enrich, and auto-respond to security alerts when it meaningfully improves signal or speed.
• Build security data pipelines: Develop customized security data pipelines and actively contribute to internal software and data platforms, collaborating across engineering teams.
• Shape detections at the source: Author detections and onboard logs by partnering across teams to instrument their services, improve log schemas, and influence infrastructure roadmaps.
• Ensure service reliability: Participate in an on-call rotation to keep detection and response services healthy.
• Embody Security Culture: Serve as a trusted security partner across Roblox, helping protect our community and enterprise while fostering a culture grounded in trust, ownership, and shared responsibility.

• 5+ years of experience in Detection Engineering: A passion for building security data services and custom detection capabilities.
• Software development proficiency: You have built production services that are efficient, reliable, and scalable using programming languages like Golang or Python. You leveraged infrastructure as code tools like Terraform and query languages like SQL.
• Hands on with SIEM, EDR, NDR, and SOAR technologies: You have on-boarded logs in your sleep and built custom detections/automations for complex environments.
• Breadth across security domains: Practical experience securing corporate endpoints, cloud environments and on-prem containers with informed opinions on tradeoffs.
• Core security engineering skills: You prioritize risk, design compensating controls and drive incidents to fully mitigate root causes.

• Intellectually restless: You relish gathering data to inform decisions. You embrace new paradigms to tackle complex problems with creativity and speed.
• A collaborative builder: You are comfortable diving into other teams' codebases, submitting github PRs, and building scalable security solutions in shared codebases.
• Pragmatic: You balance open-source, commercial tools, and custom in-house builds to find the right fit for unique security challenges.