Senior AppSec Engineer: DevSecOps & AI Guardrails

The Briefed; San Mateo (CA); On-site; USD 269,000 - 326,000; Full time

Benefits offered by this job

Equity package

Healthcare coverage

401(k) plan

Campus perks

Job summary

Roblox is seeking a Senior Security Software Engineer on Application Security to hands-on design, ship, and scale security controls integrated into developer workflows and CI/CD pipelines.

You will bridge threat modeling, code reviews, penetration testing, and vulnerability triage with automated tooling (SAST, SCA, secrets detection, fuzzing) and pioneer guardrails for AI-assisted developer workflows to mitigate prompt injections and data exfiltration.

Qualifications

• 6+ years of professional experience in software engineering, application security, or security engineering.
• Proficient in at least one core programming language (Python, Go, C#, JavaScript, Rust, or C++).
• Proven experience integrating and scaling security tools (SAST, SCA, secrets detection, dynamic fuzzing) within automated deployment pipelines.
• Solid mastery of OWASP Top 10 vulnerabilities, authentication/authorization models, microservice architectures, and secure coding practices.
• Background operating in public cloud environments (AWS/GCP), containerized microservices, APIs, Linux/Windows systems, and networking security basics.
• Demonstrated ability to translate abstract security risks into practical, maintainable software controls.
• Bachelor’s degree in Computer Science, Cybersecurity, Software Engineering, or equivalent practical experience.

Responsibilities

• DevSecOps Pipeline Security: Build and integrate automated security tooling into CI/CD pipelines to enforce secure-by-default engineering practices.
• Secure Libraries & Guardrails: Design production-grade security controls and cryptographic primitives in code.
• AI & Agentic Workflow Protection: Implement guardrails for AI-assisted developer tools and mitigate prompt injection risks.
• Threat Modeling & Architecture Reviews: Partner with engineering teams to conduct threat modeling and secure reviews for features and microservices.
• Automated Remediation Workflows: Automate vulnerability triage, prioritization, and fix-tracking at scale.
• Supply Chain & Abuse Defense: Develop detection and prevention mechanisms against software supply chain risks.
• On-Call Operations: Participate in on-call rotation and contribute to security platform evolution.

Skills

6+ years

Python

Go

C#

JavaScript

Rust

C++

CI/CD security automation

OWASP Top 10

Cloud and container security

Linux/Windows systems

Threat modeling

Education

Bachelor’s degree in Computer Science, Cybersecurity, Software Engineering, or equivalent practical experience

Tools

SAST tooling

SCA tooling

Fuzzing tools

Vulnerability triage tooling

Job description

Roblox is seeking a Senior Security Software Engineer on Application Security to hands-on design, ship, and scale security controls integrated into developer workflows and CI/CD pipelines.

You will bridge threat modeling, code reviews, penetration testing, and vulnerability triage with automated tooling (SAST, SCA, secrets detection, fuzzing) and pioneer guardrails for AI-assisted developer workflows to mitigate prompt injections and data exfiltration.