Roblox Senior Security Software Engineer in Application Security designing and building security solutions integrated into developer workflows and platforms. Focus on automation, CI/CD integrations, and scalable security controls.
Responsibilities
Integrate security into CI/CD pipelines and drive secure-by-default engineering practices
Design and build security controls, libraries, and guardrails directly in code
Develop and scale automated security tooling across CI/CD (SAST, dependency scanning, secrets detection, fuzzing, etc.)
Build and improve detection and prevention mechanisms for abuse, data exfiltration, and supply chain risks
Automate vulnerability triage, prioritization, and remediation workflows at scale
Integrate security into developer workflows and internal platforms to reduce friction and increase adoption
Design and implement security controls for agentic and AI-assisted workflows, building guardrails to mitigate risks such as prompt injection, data exfiltration, and misuse of developer and system privileges
Contribute to secure system design and architecture reviews, including threat modeling for new products and features
Qualification
Background with cloud environmentsExperience building security platformsKnowledge of cryptographyThink long-term
Required
6+ years of experience in software engineering, application security, or security engineering
Strong coding skills in at least one language (e.g., Python, Go, C#, JavaScript, Rust, C++)
Build and scale security automation in CI/CD pipelines (SAST, SCA, secrets detection, and fuzzing)
Solid understanding of application security fundamentals (OWASP Top 10, auth models, common vulnerabilities and mitigations)
Background with cloud environments, and modern architectures (microservices, APIs)
Working knowledge of Linux/Windows systems, networking fundamentals, and system-level security
Experience designing and implementing secure, scalable systems, including APIs, microservices, and distributed architectures
Ability to translate security risks into practical, scalable engineering solutions
Bachelor’s degree in a relevant field or equivalent practical experience
Preferred
Experience building security platforms, tools, or developer frameworks
Knowledge of cryptography, PKI, TLS, and secure implementations
Experience with container security and Kubernetes
Experience building internal security platforms or developer tooling
Background of supply chain security (SBOMs, signing, provenance, build integrity)
Think long-term, building resilient and scalable security solutions rather than one-off fixes
Highly execution-focused and drive outcomes in fast-paced environments
Take ownership and proactively identify and mitigate risks
