Principal Detection and Response Engineer (Cybersecurity)

TL;DR

Principal Detection and Response Engineer (Cybersecurity): Designing and developing custom security data pipelines, detection strategies, and automated response workflows to defend critical assets with an accent on real-time incident response and threat analysis. Focus on building scalable security systems, mentoring junior engineers, and fostering a high-performing security culture.

Location: Must be based in or able to work from the San Mateo, CA office (Hybrid: Tue-Thu onsite)

Company

Roblox is a global platform empowering a community of creators to build and connect through 3D immersive digital experiences.

What you will do

• Deliver robust detection and response capabilities by building new threat detection systems and automating processes.
• Design and develop customized ETL data processing pipelines for security telemetry.
• Lead real-time incident response, monitor security events, and participate in on-call rotations.
• Collaborate with InfoSec, Engineering, and Product teams to design scalable security solutions.
• Guide and support the career growth of junior engineers and contribute to team hiring.

Requirements

• 8+ years of experience in Detection and/or Response, including threat hunting and incident management.
• 4+ years of Security Data Engineering experience with streaming pipelines (e.g., Kafka, Spark, Flink, BigQuery).
• Mastery of software development using C, Golang, or Java for scalable systems.
• Deep expertise with SIEM, EDR, NDR, and SOAR technologies.
• Must have current United States work authorization (sponsorship not available for this role).

Culture & Benefits

• Equity compensation for all full-time employees.
• Comprehensive benefits package including health and wellness programs.
• Hybrid work environment with a focus on inclusive security culture.
• Opportunities to solve unique technical challenges at massive scale.