Senior Offensive Security Engineer — Purple Team Lead

Roblox; San Mateo (CA); Sur place; USD 196 750 - 243 290; Plein temps

Avantages offerts par ce poste

Equity compensation

Résumé du poste

Roblox is seeking an Offensive Security Engineer (DART) in San Mateo to lead full-stack security assessments across web apps, APIs, cloud, and backend systems. You will partner with detection engineers to validate coverage through purple team exercises and develop repeatable testing frameworks.

You’ll build custom tools, define security metrics, and stay current with evolving attack techniques while collaborating across security teams to improve Roblox’s overall security posture.

Qualifications

• 4+ years in offensive security with purple team and breach simulations.
• Proficient in Python or Go for building security tooling.
• Experience performing full-stack security assessments of web apps, APIs, and cloud infra.
• Strong knowledge of OWASP Top 10, MITRE ATT&CK, PTES and related frameworks.
• Familiarity with cloud security (AWS/Azure/GCP), CI/CD, and container security.

Responsabilités

• Conduct full-stack offensive security assessments across the tech stack.
• Drive detection engineering partnerships with purple team exercises and threat emulation.
• Develop and maintain security testing tools and automation scripts.
• Build and analyze security metrics to measure control effectiveness.
• Research latest attack techniques and contribute to security improvements.

Connaissances

Offensive security

Purple team

Python/Go

Threat emulation

Security tooling

Detection engineering

Report writing

Outils

SOAR platforms

Configuration management

BAS frameworks

Description du poste

Roblox is seeking an Offensive Security Engineer (DART) in San Mateo to lead full-stack security assessments across web apps, APIs, cloud, and backend systems. You will partner with detection engineers to validate coverage through purple team exercises and develop repeatable testing frameworks.

You’ll build custom tools, define security metrics, and stay current with evolving attack techniques while collaborating across security teams to improve Roblox’s overall security posture.