Senior AppSec Engineer: Build Secure, Scalable DevOps

Roblox; California (MO); On-site; USD 269,000 - 326,000; Full time

Benefits offered by this job

Equity compensation

Benefits described on page

Job summary

Roblox is seeking a Senior Security Software Engineer - Application Security to embed security into developer workflows and platforms. You will design and ship security controls, threat modeling, and scalable tooling, balancing deep technical work with systemic security solutions to reduce risk at scale.

The role emphasizes automation, CI/CD integration, and collaboration with engineering teams across the Roblox platform, including on-call rotations and security tooling evolution.

Qualifications

• Six plus years of experience in software engineering, application security, or security engineering.
• Strong coding skills in at least one language (e.g., Python, Go, C#, JavaScript, Rust, C++).
• Build and scale security automation in CI/CD pipelines (SAST, SCA, secrets detection, and fuzzing).
• Solid understanding of application security fundamentals (OWASP Top 10, auth models, common vulnerabilities and mitigations).
• Background with cloud environments and modern architectures (microservices, APIs).
• Working knowledge of Linux/Windows systems, networking fundamentals, and system-level security.

Responsibilities

• Integrate security into CI/CD pipelines and drive secure-by-default engineering practices.
• Design and build security controls, libraries, and guardrails directly in code.
• Develop and scale automated security tooling across CI/CD (SAST, dependency scanning, secrets detection, fuzzing, etc.).
• Build and improve detection and prevention mechanisms for abuse, data exfiltration, and supply chain risks.
• Automate vulnerability triage, prioritization, and remediation workflows at scale.
• Integrate security into developer workflows and internal platforms to reduce friction and increase adoption.
• Design and implement security controls for agentic and AI-assisted workflows, building guardrails to mitigate risks such as prompt injection, data exfiltration, and misuse of developer and system privileges.
• Contribute to secure system design and architecture reviews, including threat modeling for new products and features.

Skills

Python

Go

C#

JavaScript

Rust

C++

Education

Bachelor's degree in a relevant field

Tools

SAST

SCA

Fuzzing

CI/CD tooling

Job description

Roblox is seeking a Senior Security Software Engineer - Application Security to embed security into developer workflows and platforms. You will design and ship security controls, threat modeling, and scalable tooling, balancing deep technical work with systemic security solutions to reduce risk at scale.

The role emphasizes automation, CI/CD integration, and collaboration with engineering teams across the Roblox platform, including on-call rotations and security tooling evolution.