Sr. Cloud Security Engineer - Infra Security | Roblox NEW

The Briefed; San Mateo (CA); On-site; USD 251,000 - 326,000; Full time

Benefits offered by this job

Equity compensation package

Healthcare: health, dental, vision

Onsite campus with meals and events

Vacation, holidays, parental leave, 41

401(k) matching programs

Job summary

Roblox is seeking a Senior Cloud Security Engineer embedded within the Platform Security team to define and implement security strategy across hybrid and multi-cloud environments. You will build automated services and developer tooling that make secure deployment the easiest path.

In this role you will architect self-healing baselines, create cloud-tailored detections, and deploy guardrails that protect developers without slowing velocity.

Qualifications

• 4+ years of relevant professional software and cloud security engineering experience.
• Hands-on coding in Python, Golang, or C# with a drive to learn more.
• Experience with IaC frameworks (Terraform, Pulumi) and automated provisioning.
• Solid understanding of container security and Kubernetes.
• Knowledge of zero-trust, network security, and secure-by-default designs.

Responsibilities

• Paved-road tooling: build security services and developer workflows that automate compliance.
• Self-healing infrastructure: monitor and enforce automated security baselines.
• Secure-by-default blueprints: embed threat modeling and hardening into multi-cloud architectures.
• Policy & egress guardrails: implement controls and secure connectivity.
• Cloud detections & observability: develop threat detection and security pipelines.

Skills

Python

Golang

C#

Cloud security engineering

Tools

Terraform

Pulumi

Kubernetes

Job description

As a Senior Cloud Security Engineer embedded within the Platform Security team, you will define and implement security strategy, architecture, and automated controls across Roblox's hybrid and multi-cloud environments. Operating with a high degree of autonomy, you will partner closely with Information Security and Infrastructure teams to create secure "paved roads"—building automated services and developer tooling that make the secure path the easiest path. You will architect self-healing infrastructure baselines, author cloud-tailored detections, and deploy organization-wide security guardrails that protect developers without reducing deployment velocity.

Key Responsibilities

Cloud Security Architecture & Automated Guardrails

• Paved-Road Tooling: Build innovative security services, internal tools, and developer workflows that automate compliance and accelerate safe software deployment.
• Self-Healing Infrastructure: Architect and scale automated monitoring systems that detect configuration drift and automatically enforce self-healing security baselines across cloud environments.
• Secure-by-Default Blueprints: Partner deeply with core infrastructure teams to embed threat modeling, secure-by-default design patterns, and system hardening into multi-cloud architectures.
• Policy & Egress Guardrails: Implement organizational security controls, zero-trust network boundaries, secure connectivity protocols, and strict egress controls.
• Cloud Detections & Observability: Author, optimize, and maintain threat detection logic and security observability pipelines tailored specifically to Roblox's cloud footprint.

Requirements

Technical Depth & Cloud Security Foundations

• Experience Track: 4+ years of relevant professional software and cloud security engineering experience.
• Programming Proficiency: Hands-on experience writing and maintaining code in at least one modern language (Python, Golang, or C#), with a drive to learn new technologies.
• Infrastructure-as-Code & Automation: Practical experience with IaC frameworks (Terraform, Pulumi), automated provisioning, system hardening, and cloud security policy enforcement.
• Container & Orchestration Security: Strong understanding of container security concepts and container orchestration platforms (Kubernetes).
• Network Security Best Practices: Deep operational understanding of network security, resource isolation, zero-trust architectures, and egress filtering.
• Problem-Solving & Build vs. Buy: Pragmatic approach to evaluating commercial vendors, open-source tooling, and custom in-house software builds.

Preferred Qualifications

• Experience managing security posture in large-scale, multi-region hybrid clouds (AWS/GCP combined with bare-metal private clouds).
• Direct experience authoring custom OPA/Rego policies, Kyverno rules, or cloud-native posture management (CSPM) automation.
• Professional certifications such as AWS Certified Security – Specialty, CKA/CKS, or CISSP.

Total Rewards & Benefits

• Compensation & Equity: San Mateo base salary range ($251,090 – $326,060 USD) + competitive Roblox equity compensation package.
• Healthcare & Wellbeing: Comprehensive health, dental, and vision insurance packages for employees and eligible dependents.
• Onsite Perks & Campus: Modern San Mateo headquarters featuring daily catered meals, team events, and state-of-the-art technical setups.
• Time Off & Retirement: Generous vacation policies, paid company holidays, paid parental leave, and 401(k) matching programs.