Senior Security Software Engineer — Vulnerability Automation

The Briefed; San Mateo (CA); On-site; USD 217,000 - 269,000; Full time

Benefits offered by this job

Daily catered meals

Team events

Modern campus setups

Job summary

Roblox is seeking a Senior Security Software Engineer on the Vulnerability Management team to design, build, and maintain internal tooling that makes vulnerability awareness and remediation a first-class experience for engineers across Roblox's global stack.

In this hands-on role, you will work with Python, Go, Java, or C#, automate detection and triage, mentor others, and partner with software, infrastructure, and product teams to reduce risk without slowing development.

Qualifications

• 4+ years of professional software engineering experience focused on security tools or vulnerability management.
• Proficiency in Python, Go, Java, or C#.
• Experience building security tools and vulnerability management systems.
• Knowledge of OWASP Top 10, CVE classifications, dependency scanning, and static/dynamic analysis.
• Strong communication with non-security engineers.

Responsibilities

• Design, build, and scale internal tooling to identify, surface, and track vulnerabilities across Roblox's infrastructure.
• Develop intuitive remediation interfaces for engineers.
• Collaborate with software, infrastructure, and product teams to prioritize and mitigate risks.
• Automate security operations, scanning workflows, and pipelines.
• Mentor junior engineers in secure coding practices and secure architecture.

Skills

4+ years software engineering

Python/Go/Java/C#

Job description

Roblox is seeking a Senior Security Software Engineer on the Vulnerability Management team to design, build, and maintain internal tooling that makes vulnerability awareness and remediation a first-class experience for engineers across Roblox's global stack.

In this hands-on role, you will work with Python, Go, Java, or C#, automate detection and triage, mentor others, and partner with software, infrastructure, and product teams to reduce risk without slowing development.