Senior Security Software Engineer, Application Security

Location: San Mateo, California, United States; office attendance is required Tuesday, Wednesday, and Thursday, with optional presence Monday and Friday

Salary: $269,170–$326,060 USD base pay annually

Company

Roblox builds a 3D immersive digital platform and tools that enable developers and creators to build interactive experiences for a global community.

What you will do

• Integrate application security into CI/CD pipelines and developer workflows.
• Design and build security controls, libraries, guardrails, and reusable engineering patterns.
• Develop automated security tooling for SAST, dependency scanning, secrets detection, and fuzzing.
• Build detection and prevention mechanisms for abuse, data exfiltration, and software supply chain risks.
• Automate vulnerability triage, prioritization, and remediation workflows at scale.
• Design security controls for AI-assisted and agentic workflows, including protections against prompt injection and privilege misuse.

Requirements

• 6+ years of experience in software engineering, application security, or security engineering.
• Strong coding skills in at least one language such as Python, Go, C#, JavaScript, Rust, or C++.
• Experience building security automation in CI/CD pipelines, including SAST, SCA, secrets detection, and fuzzing.
• Strong understanding of application security fundamentals, OWASP Top 10, authentication models, vulnerabilities, and mitigations.
• Experience with cloud environments, microservices, APIs, distributed architectures, Linux or Windows, networking, and system-level security.
• Bachelor’s degree in a relevant field or equivalent practical experience.

Nice to have

• Experience building security platforms, tools, or developer frameworks.
• Knowledge of cryptography, PKI, TLS, and secure implementations.
• Experience with container security, Kubernetes, internal security platforms, or developer tooling.
• Experience with supply chain security, including SBOMs, signing, provenance, and build integrity.

Culture & Benefits

• Hands-on work focused on resilient, scalable security solutions rather than one-off fixes.
• Close collaboration with engineering teams to balance security and developer productivity.
• Participation in Application Security on-call rotations.
• Full-time employees are eligible for equity compensation and company benefits.
• For US-based roles, certain US visa categories may not be supported and future H-1B sponsorship may not be available.