Senior Offensive Security Engineer: Purple Team & Detection

Roblox; Canada (KY); On-site; USD 197,000 - 243,000; Full time

Benefits offered by this job

Equity compensation

Office onsite 3 days/week

Benefits as described

Job summary

Roblox is seeking an Offensive Security Engineer within the DART to perform full‑stack security assessments across web apps, APIs, cloud, and backend systems, collaborating with detection engineers to validate coverage and strengthen defenses.

You will develop tools and frameworks, design security metrics, and drive repeatable testing methodologies while staying current with the latest attack techniques. This role requires strong communication and a passion for improving security posture.

Qualifications

• 4+ years of relevant professional experience in offensive security including purple team exercises and breach attack simulations.
• Proficiency in Python or Go for building security tooling and automation, including experience with SOAR platforms and configuration management.
• Security assessment expertise across web applications, APIs, cloud infrastructure, and backend systems.
• Platform experience with breach attack simulation platforms and working with detection engineering teams to validate coverage.
• Deep understanding of OWASP Top 10, attack techniques, exploit development, post-exploitation methodologies, MITRE ATT&CK, PTES, BAS methodologies, and modern detection stacks (EDR, SIEM, XDR).
• Knowledge of security concepts including reverse engineering, cloud security (AWS/Azure/GCP), container security, CI/CD pipeline security, API security, and security metrics development.
• Certifications such as OSCP, OSCE, GXPN, or equivalent practical experience.
• Strong analytical and problem-solving, technical writing, and ability to communicate complex concepts.

Responsibilities

• Perform offensive security assessments across the technology stack (web apps, APIs, cloud, backend).
• Drive detection engineering partnerships through purple team exercises, attack simulations, and threat emulation to validate coverage.
• Develop custom tools, BAS frameworks, and automation scripts enabling repeatable testing and measurable security improvements.
• Build security metrics to measure control effectiveness and detection coverage over time.
• Research and innovate by staying current with attack techniques, tools and methodologies.
• Collaborate across security teams to foster continuous security improvement.

Job description

Roblox is seeking an Offensive Security Engineer within the DART to perform full‑stack security assessments across web apps, APIs, cloud, and backend systems, collaborating with detection engineers to validate coverage and strengthen defenses.

You will develop tools and frameworks, design security metrics, and drive repeatable testing methodologies while staying current with the latest attack techniques. This role requires strong communication and a passion for improving security posture.