Senior AppSec Engineer — Automate Security (Equity)

Roblox; Canada (KY); On-site; USD 269,000 - 326,000; Full time

Benefits offered by this job

Equity compensation

Benefits described in page

Job summary

Roblox is hiring a Senior Security Software Engineer - Application Security to design, build, and ship security solutions integrated into developer workflows and platforms. You will scale application security through automation, CI/CD integrations, secure libraries, and reusable patterns.

You will balance deep technical work with systemic solutions that reduce risk at scale, participate in on-call rotations, and contribute to security tooling and platform evolution.

Qualifications

• 6+ years of experience in software engineering, application security, or security engineering.
• Strong coding skills in at least one language (e.g., Python, Go, C#, JavaScript, Rust, C++).
• Build and scale security automation in CI/CD pipelines (SAST, SCA, secrets detection, and fuzzing).
• Solid understanding of application security fundamentals (OWASP Top 10, auth models, common vulnerabilities and mitigations).
• Background with cloud environments, and modern architectures (microservices, APIs).
• Working knowledge of Linux/Windows systems, networking fundamentals, and system-level security.
• Experience designing and implementing secure, scalable systems, including APIs, microservices, and distributed architectures.
• Ability to translate security risks into practical, scalable engineering solutions.
• Bachelor’s degree in a relevant field or equivalent practical experience.

Responsibilities

• Integrate security into CI/CD pipelines and drive secure-by-default engineering practices.
• Design and build security controls, libraries, and guardrails directly in code.
• Develop and scale automated security tooling across CI/CD (SAST, dependency scanning, secrets detection, fuzzing).
• Build and improve detection and prevention mechanisms for abuse, data exfiltration, and supply chain risks.
• Automate vulnerability triage, prioritization, and remediation workflows at scale.
• Integrate security into developer workflows and internal platforms to reduce friction and increase adoption.
• Design and implement security controls for agentic and AI-assisted workflows, building guardrails to mitigate risks such as prompt injection, data exfiltration, and misuse of developer and system privileges.
• Contribute to secure system design and architecture reviews, including threat modeling for new products and features.

Skills

6+ years experience

Strong coding skills

CI/CD security

OWASP Top 10

Cloud environments

APIs & distributed

Linux/Windows

Threat modeling

Education

Bachelor's degree or equivalent

Tools

SAST

SCA

Fuzzing

Job description

Roblox is hiring a Senior Security Software Engineer - Application Security to design, build, and ship security solutions integrated into developer workflows and platforms. You will scale application security through automation, CI/CD integrations, secure libraries, and reusable patterns.

You will balance deep technical work with systemic solutions that reduce risk at scale, participate in on-call rotations, and contribute to security tooling and platform evolution.