Principal Security Software Engineer, Application Security

San Mateo, CAfull time

On Site

senior

$269k–$326k

H1B: no

Roblox Principal Security Software Engineer at Roblox responsible for designing and building security solutions integrated into developer workflows. Key role includes scaling application security through automation, CI/CD integrations, and secure libraries.

Responsibilities

Integrate security into CI/CD pipelines and drive secure-by-default engineering practices
Design and build security controls, libraries, and guardrails directly in code
Develop and scale automated security tooling across CI/CD (SAST, dependency scanning, secrets detection, fuzzing, etc.)
Build and improve detection and prevention mechanisms for abuse, data exfiltration, and supply chain risks
Automate vulnerability triage, prioritization, and remediation workflows at scale
Integrate security into developer workflows and internal platforms to reduce friction and increase adoption
Design and implement security controls for agentic and AI-assisted workflows, building guardrails to mitigate risks such as prompt injection, data exfiltration, and misuse of developer and system privileges
Contribute to secure system design and architecture reviews, including threat modeling for new products and features

Qualification

Background with cloud environmentsExperience building security platformsKnowledge of cryptographyThink long-term

Required

6+ years of experience in software engineering, application security, or security engineering
Strong coding skills in at least one language (e.g., Python, Go, C#, JavaScript, Rust, C++)
Build and scale security automation in CI/CD pipelines (SAST, SCA, secrets detection, and fuzzing)
Solid understanding of application security fundamentals (OWASP Top 10, auth models, common vulnerabilities and mitigations)
Background with cloud environments, and modern architectures (microservices, APIs)
Working knowledge of Linux/Windows systems, networking fundamentals, and system-level security
Experience designing and implementing secure, scalable systems, including APIs, microservices, and distributed architectures
Ability to translate security risks into practical, scalable engineering solutions
Bachelor’s degree in a relevant field or equivalent practical experience

Preferred

Experience building security platforms, tools, or developer frameworks
Knowledge of cryptography, PKI, TLS, and secure implementations
Experience with container security and Kubernetes
Experience building internal security platforms or developer tooling
Background of supply chain security (SBOMs, signing, provenance, build integrity)
Think long-term, building resilient and scalable security solutions rather than one-off fixes
Highly execution-focused and drive outcomes in fast-paced environments
Take ownership and proactively identify and mitigate risks

Benefits

Vision
Equity/RSU

Company

Roblox

View company page

Source: greenhouse

Active within the past hour

More roles at Roblox

Senior Software Engineer, iOS

San Mateo, CA

Senior Software Engineer - Data Access

San Mateo, CA

Senior Site Reliability Engineer, Compute

San Mateo, CA

Senior Security Software Engineer, IAM

San Mateo, CA

Apply on Employer Site