Senior Offensive Security Engineer

Robinhood; Toronto; On-site; CAD 136,000 - 160,000; Full time

Job summary

A leading financial technology company in Toronto is seeking an Offensive Security Engineer to join their Red Team. This role involves validating security assumptions, conducting penetration testing, and performing threat modeling. The ideal candidate will have experience in the fintech domain and a passion for security. The position offers a competitive salary range of CAD $136,000 - $160,000 plus bonuses and equity.

Qualifications

• Experience in the Financial Technology domain.
• Technical lead experience at other organizations.

Responsibilities

• Evangelize Offensive Security findings.
• Mentor and guide Offensive Security team members.
• Utilize threat modeling to shape Red Team priorities.
• Plan and execute Red Team exercises.
• Perform penetration testing and code reviews.
• Publish blog posts and present at security conferences.

Skills

Red Teaming

Threat modeling

Penetration testing

Vulnerability research

Mentoring

Job description

Overview

Join us in building the future of finance. Our mission is to democratize finance for all. An estimated $124 trillion of assets will be inherited by younger generations in the next two decades—the largest transfer of wealth in human history. If you’re ready to be at the epicenter of this historic cultural and financial shift, keep reading.

Robinhood is looking for an Offensive Security Engineer who is passionate about Red Teaming, Adversarial Simulation, and breaking / fixing systems, to join the Red Team. The Red Team is a core pillar of the Offensive Security team and sits within the Safety & Productivity Engineering organization. The Red Team works with teams across Robinhood to ensure our products, services, and processes are secure through threat modeling, penetration testing, adversarial simulations, and red teaming.

Here are some examples of things our team does frequently that you’ll be heavily involved with:

• Red Teaming to validate assumptions, facilitate decisions, and improve our ability to detect and respond to incidents.
• Perform threat modeling against critical and new services. Articulate the actual security risk to risk working groups.
• Penetration testing our critical infrastructure, production applications, networks, offices, and processes.
• Sparring with Detection and Response and other stakeholders via Adversarial Simulations to prepare for incidents.
• Partnering with the physical security team to conduct assessments of Robinhood properties.
• Serving as a technical advocate and Subject Matter Expert for privacy and security decisions, designs, and discussions.
• Driving innovative ideas to implementation as the company evolves and grows.
• Conduct vulnerability research to understand latest TTPs, exploits, and forward looking capabilities.
• Leaving things better than you found them by partnering to fix the issues and not just finding broken things.
• As an Offensive Security Engineer, you will work across multiple domains, partner with key teams across Robinhood, and help build an even more resilient and secure product for our customers.

The role is located in the office location(s) listed on this job description which will align with our in-office working environment. Please connect with your recruiter for more information regarding our in-office philosophy and expectations.

What you’ll do

• Evangelize the Offensive Security Team’s Findings and Projects with stakeholders throughout the company and collaborate with other teams to create solutions that balance security with other priorities.
• Mentor and provide guidance to the members of the Offensive Security team.
• Utilize threat modeling to identify threats and shape Red Team priorities and exercises.
• Plan and execute long term, broadly scoped, black box Red Team exercises utilizing vulnerability research, exploit development, and utilizing public proof of concept code.
• Perform penetration testing, code reviews, and design/architecture reviews.
• Write tooling to assist with and automate Red Team assessments.
• Plan and participate in Adversarial Simulation exercises with various security teams.
• Lead Security Incidents when Pentest or Red Team findings require them.
• Publish blog posts and present talks at security conferences.

What you bring

• Experience in the Financial Technology domain.
• Experience being a technical lead at other organizations.

In addition to the base pay range listed below, this role is also eligible for bonus opportunities + equity + benefits.

Base pay for the successful applicant will depend on a variety of job-related factors, which may include education, training, experience, location, business needs, or market demands. The expected base pay range for this role is based on the location where the work will be performed.

Base Pay Range:

Toronto, ON

$136,000 - $160,000 CAD

Note: Total Rewards vary by region and entity.

If our mission energizes you and you’re ready to build the future of finance, we look forward to seeing your application.

Robinhood provides equal opportunity for all applicants, offers reasonable accommodations upon request, and complies with applicable equal employment and privacy laws. Inclusion is built into how we hire and work—welcoming different backgrounds, perspectives, and experiences so everyone can do their best. Please review the Privacy Policy for your country of application.