Principal Security Engineer - Enterprise & AI

The Briefed; San Mateo (CA); Sur place; USD 321 000 - 366 000; Plein temps

Avantages offerts par ce poste

Healthcare & Wellness coverage

Hybrid/onsite flexibility

Résumé du poste

Roblox is seeking a Principal Security Engineer to define and execute the global enterprise security strategy across corporate infrastructure, SaaS, endpoints, and supply chains. You will pioneer governance for AI agents and MCP servers, establishing guardrails around identity, permissions, and prompt injection mitigation.

You will lead low-code automation, vendor reviews, and zero-trust integration with IT and engineering teams, mentoring senior engineers and shaping security at scale.

Qualifications

• 10+ years of information security leadership.
• Hands-on with securing AI systems and agentic workflows.
• Deep IAM knowledge: SSO, MFA, OAuth 2.0, SAML, PAM, and machine identities.
• Experience with low-code/no-code automation platforms.
• Knowledge of Zero Trust and standards like SOC 2 / ISO 27001.

Responsabilités

• Define enterprise security strategy across Endpoint, SaaS, Supply Chain, and IAM.
• Govern AI agents, MCP servers, and LLM tooling with guardrails and governance frameworks.
• Architect and operate automation workflows on low-code/no-code platforms to enforce policy and monitor compliance.

Connaissances

Security strategy

AI governance

IAM architectures

Low-code automation

Threat modeling

Outils

Google Workspace

Okta

OSQuery

Description du poste

Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect across 3D immersive digital experiences.

As a Principal Security Engineer on the Enterprise Security team, you will define and execute Roblox's global enterprise security strategy across corporate infrastructure, SaaS environments, endpoints, and supply chains. In this high-impact, strategic role, you will pioneer security governance and threat models for AI agents, Model Context Protocol (MCP) servers, and agentic workflows—establishing guardrails around agent identity, scoped temporary permissions, prompt injection mitigation, and auditability. You will leverage low-code/no-code orchestration automation and partner across InfoSec, IT, Corporate Engineering, and Trust & Safety to deliver secure-by-design outcomes that scale with business velocity.

Key Responsibilities

• Enterprise Security Strategy: Own the overarching security roadmap and architectural direction across Endpoint Security, SaaS Security, Supply Chain Security, and Identity & Access Management (IAM).
• AI & Agentic Governance: Define threat models, security controls, and governance frameworks for AI agents, MCP servers, and LLM tooling—covering short-lived access, delegated permissions, tool scoping, and exfiltration prevention.
• Low-Code / No-Code Automation: Architect and operate security orchestration workflows on low-code/no-code platforms to enforce policy, remediate risks, and monitor compliance metrics at scale.
• Vendor Evaluation & Build vs. Buy: Lead vendor selection and architecture reviews for enterprise security platforms; assess commercial tools against strict compliance standards (SOC 2, ISO 27001) and integrate them via APIs.
• Secure-by-Design Partnership: Embed zero-trust security controls into IT systems, DevOps workflows, and enterprise application deployments without slowing cross-functional partners down.
• Technical Mentorship: Mentor senior security engineers, conduct threat modeling reviews, and influence technical plans across executive and cross-functional leadership.

Requirements

Security Experience & AI Governance

• 10+ years of progressive information security experience, with a proven track record of leading cross-functional technical security initiatives.
• Hands-on experience securing AI systems and agentic workflows—including agent identity/authorization, MCP tool access controls, prompt injection defense, data exfiltration prevention, and AI governance frameworks.
• Deep expertise in core IAM protocols and architectures: SSO, MFA/passkeys, OAuth 2.0, SAML, SCIM, privileged access management (PAM), and machine identities.
• Demonstrated experience designing, operating, or scaling security workflows using low-code/no-code automation platforms.
• Comprehensive knowledge of endpoint protection, SaaS governance, supply chain security, Zero Trust architecture, and compliance standards (SOC 2, ISO 27001).

Soft Skills & Work Logistics

• Strategic mindset with the ability to balance strict security rigor with business pragmatism.
• Strong collaborative presence capable of influencing engineering and IT partners.
• Ability to work onsite 3 days per week (Tuesdays, Wednesdays, Thursdays) at Roblox HQ in San Mateo, CA.
• Note: Roblox may not be able to support certain visa categories or future H-1B sponsorship for this position.

Preferred Qualifications

• Ability to read and write automation scripts (Python or similar languages).
• Hands-on experience with enterprise tools: Google Workspace, Okta, and OSQuery.
• Experience designing security architectures for large-scale consumer-tech or gaming enterprise environments.

Total Rewards & Workplace Benefits

• Compensation: Base salary of $320,880 – $365,710 USD + comprehensive long-term equity grant package.
• Healthcare & Wellness: Comprehensive medical, dental, and vision coverage options; mental health resources and wellness stipends.
• Financial Security: 401(k) program with company matching; life and disability insurance.
• Time Off & Work Culture: Generous PTO policies, observed holidays, and hybrid workplace flexibility.