As a Principal Security Engineer you will be a foundational member of the detection and response team responsible for the protection of Roblox’s intellectual property, trade secrets, and confidential information. You will lead, coordinate, and deliver Roblox security program achievements by communicating with stakeholders across security and engineering. You will be a key contributor in supporting other security teams and driving business-friendly security and developing processes along with improvements. This role will have a direct, immediate, and positive impact on our internal security, external customers, and the hundreds of millions of users that use and rely on Roblox.

You Have:

• 8+ years of experience in working on a security detection and response team and have niche expertise in proactive alert development and reactive response to intellectual property, trade secrets, and confidential information.
• Experience in automation in Python, Bash, Go, similar languages, or security orchestration
• Knowledgeable in detection engineering, endpoint detection and response tooling, intrusion detection, threat hunting, threat modeling, common IOCs/TTPs, and initial access techniques for insider risks
• Expertise with SOAR, UAM, SIEM, DLP, and UEBA technologies
• Have an executive presence with superb communication skills and ability to collaborate with multiple teams and intelligence source groups both internal and external to the organization
• Have experience responding to high severity investigations and the ability to conduct technical response.

You Will:

• Be responsible for developing an alerting system to protect Roblox’s intellectual property, trade secrets, and confidential information.
• Build runbooks, procedures, and orchestration for triage
• Conduct timely investigation summaries with relevant collaborators such as Roblox Employment Legal, Roblox Legal, and Roblox Security Leadership
• Spearhead, strategize, and collaborate to mature the detection and response program at Roblox
• Respond to alerts, review logs, conduct threat hunts, and further enhance our proactive monitoring and alerting.
• Lead tabletop exercises with key stakeholders and partners
• Develop metrics around monitoring, detection, response, and forecasting
• Work with sister security teams to reduce threat surface areas and raise security awareness
• Evaluate, recommend, and improve upon existing technical and non-technical solutions to detect and respond to potential risks and threats