Manager of Response, Automation, Intelligence & Detection Engineering

Robinhood; Bellevue (WA); On-site; USD 217,000 - 255,000; Full time

Benefits offered by this job

Bonus opportunities

Equity

401(k) matching

Job summary

Robinhood is seeking a Manager of Response, Automation, Intelligence & Detection Engineering to lead SecOps teams across North America and shape the evolution of defensive security. You will drive high‑impact incident response, detection engineering, and threat intelligence initiatives while championing AI and automation.

The role emphasizes building and maturing programs, defining metrics, and partnering with cross‑functional leaders to protect millions of customers.

Qualifications

• 8+ years of experience in security operations, incident response, detection engineering, threat intelligence, or a related field.
• 4+ years of experience leading security engineering or security operations teams, including hiring and coaching.
• Proven track record building and scaling detection and response programs with measurable security outcomes.
• Experience leading high‑severity incidents and coordinating cross‑functional response with engineering, legal, and exec stakeholders.

Responsibilities

• Lead the Detection & Response and Threat Intelligence organizations across North America, guiding vision and priorities.
• Mature detection and incident response capabilities, improving coverage, workflows, readiness, and outcomes.
• Define and track operational metrics, using data to drive team performance.
• Lead security incident response for high‑severity events and conduct post‑incident reviews.
• Collaborate with Security Engineering, Infrastructure, Product Security, Trust & Safety, and Engineering leaders.
• Drive adoption of automation, AI, and modern engineering practices to scale operations.
• Contribute to long‑term security strategy, annual planning, budgeting, and org design.

Skills

Security operations

Incident response

Threat intelligence

Cloud environments

Endpoint security

Automation & AI

Stakeholder management

Technical leadership

Tools

SIEM

EDR

Job description

Manager of Response, Automation, Intelligence & Detection Engineering

Join us in building the future of finance.

Our mission is to democratize finance for all. An estimated $124 trillion of assets will be inherited by younger generations in the next two decades. The largest transfer of wealth in human history. If you’re ready to be at the epicenter of this historic cultural and financial shift, keep reading.

About the team + role

We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards.

The Security Operations (SecOps) team protects Robinhood and its customers by detecting, investigating, and responding to security threats across our production systems, endpoints, and cloud environments. We combine detection engineering, incident response, and threat intelligence to identify emerging risks, strengthen our defenses, and reduce the impact of attacks before they reach our customers. As we continue to evolve our security platform, we're embracing AI and automation to help our teams move faster, uncover threats more effectively, and scale our defenses against increasingly sophisticated adversaries.

As the Manager of Response, Automation, Intelligence and Detection Engineering (RAID) within SecOps, you will lead teams across North America, shaping the strategy, execution, and long‑term evolution of our defensive security capabilities. You'll be responsible for building high‑performing teams, maturing our detection and incident response programs, and ensuring we stay ahead of an increasingly sophisticated threat landscape. Working closely with Security, Engineering, Infrastructure, and Trust & Safety, you'll translate emerging threats into scalable defenses while championing the use of AI, automation, and modern engineering practices to transform how we detect, investigate, and respond to security events. This is a highly visible leadership role where your decisions will directly influence Robinhood's security posture and help protect millions of customers.

This role is based in our Menlo Park, CA or Denver, CO office(s), with in‑person attendance expected at least 5 days per week.

At Robinhood, we believe in the power of in‑person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high‑performing teams.

Applications for this role will be accepted through July 31, 2026. Please connect with your recruiter for more information about this role’s application window.

What you’ll do

• Lead the Detection & Response and Threat Intelligence organizations across North America, setting the technical vision, organizational strategy, and execution priorities for both teams.
• Mature Robinhood's detection and incident response capabilities by improving detection coverage, response workflows, operational readiness, and measurable security outcomes.
• Define and track operational metrics such as detection coverage, response time, investigation quality, and control effectiveness, using data to continuously improve team performance.
• Lead security incident response for high‑severity events, serving as an Incident Commander when needed and ensuring thorough post‑incident reviews that drive lasting improvements.
• Partner with Security Engineering, Infrastructure, Product Security, Trust & Safety, and Engineering leaders to translate emerging threats into scalable detection, response, and prevention capabilities.
• Drive adoption of automation, AI, and modern engineering practices to improve analyst productivity, accelerate investigations, and scale security operations.
• Contribute to long‑term security strategy, annual planning, budgeting, and organizational design as the Detection & Response program continues to grow.

What you bring

• 8+ years of experience in security operations, incident response, detection engineering, threat intelligence, or a closely related security discipline.
• 4+ years of experience leading high‑performing security engineering or security operations teams, including hiring, coaching, and organizational development.
• Demonstrated experience building and scaling detection and response programs, including incident response, detection engineering, operational processes, and security metrics.
• Experience leading high‑severity security incidents and coordinating cross‑functional response efforts involving engineering, communications, legal, and executive stakeholders.
• Strong technical foundation across modern cloud environments, endpoint security, identity systems, SIEM, EDR, and detection engineering practices, with the ability to provide technical leadership without needing to be the primary implementer.
• Experience applying automation, AI, or software engineering practices to improve the scale and effectiveness of security operations.
• Excellent communication and stakeholder management skills, with the ability to influence engineering leaders and clearly communicate technical risk to executive audiences.
• Demonstrated ability to balance strategic planning with operational execution in a fast‑paced, high‑growth environment.

Our ambitious roadmap requires a great culture shaped by exceptional leaders. Here’s what we expect from them:

• Drive high performance by setting clear, focused goals, giving real‑time feedback, stretching top talent, and scaling impact through focus, innovation, and tech.
• Hire and retain top talent by setting a high bar, hiring only those who raise it, investing in onboarding, and addressing talent issues quickly and fairly.
• Create community by connecting work to purpose, removing friction while prioritizing safety, building trust and inclusion, and leading from the front with integrity.

What we offer

• Challenging, high‑impact work to grow your career.
• Performance‑driven compensation with multipliers for outsized impact, bonus programs, equity ownership, and 401(k) matching.
• Best‑in‑class benefits to fuel your work, including 100% paid health insurance for employees with 90% coverage for dependents.
• Lifestyle wallet — a highly flexible benefits spending account for wellness, learning, and more.
• Employer‑paid life & disability insurance, fertility benefits, and mental health benefits.
• Time off to recharge including company holidays, paid time off, sick time, parental leave, and more!
• Exceptional office experience with catered meals, events, and comfortable workspaces.

In addition to the base pay range listed below, this role is also eligible for bonus opportunities, equity, and benefits.

Base pay for the successful applicant will depend on a variety of job‑related factors, which may include education, training, experience, location, business needs, or market demands. The expected base pay range for this role is based on the location where the work will be performed and is aligned to one of 3 compensation zones. For other locations not listed, compensation can be discussed with your recruiter during the interview process.

Base Pay Range:

Zone 1 (Menlo Park, CA; New York, NY; Bellevue, WA; Washington, DC)

$217,000 - $255,000 USD

Zone 2 (Denver, CO; Westlake, TX; Chicago, IL)

$190,000 - $224,000 USD

Zone 3 (Lake Mary, FL; Clearwater, FL; Gainesville, FL)

$169,000 - $199,000 USD

Click here to learn more about our Total Rewards, which vary by region and entity.

If our mission energizes you and you’re ready to build the future of finance, we look forward to seeing your application.

Equal Employment Opportunity Information

At Robinhood, we care deeply about diverse representation in our workforce as it supports our mission to democratize finance for all. In support of this goal, we encourage applicants to voluntarily identify demographic information. This information helps us to continue building a more inclusive workplace and to ensure effective recruiting programs that are inclusive of individuals across all backgrounds.

Self-identifying in this section is completely voluntary and if you choose not to provide any information, please select the “I don't wish to answer” option under that question. Whatever your decision, data that you provide in this section will not be considered in the hiring process or thereafter. Individuals seeking employment at Robinhood are considered without regard to race, color, religion, national origin, age, sex, sexual orientation, marital status, ancestry, physical or mental disability, neurodivergence, veteran status, gender identity or expression, or any other characteristic protected by law.

Robinhood provides equal opportunity for all applicants, offers reasonable accommodations upon request, and complies with applicable equal employment and privacy laws. Inclusion is built into how we hire and work—welcoming different backgrounds, perspectives, and experiences so everyone can do their best.

Please review the Privacy Policy for your country of application.