Principal Security Engineer - Enterprise & AI

Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect across 3D immersive digital experiences.

As a Principal Security Engineer on the Enterprise Security team, you will define and execute Roblox's global enterprise security strategy across corporate infrastructure, SaaS environments, endpoints, and supply chains. In this high-impact, strategic role, you will pioneer security governance and threat models for AI agents, Model Context Protocol (MCP) servers, and agentic workflows—establishing guardrails around agent identity, scoped temporary permissions, prompt injection mitigation, and auditability. You will leverage low-code/no-code orchestration automation and partner across InfoSec, IT, Corporate Engineering, and Trust & Safety to deliver secure-by-design outcomes that scale with business velocity.

Key Responsibilities

• Enterprise Security Strategy: Own the overarching security roadmap and architectural direction across Endpoint Security, SaaS Security, Supply Chain Security, and Identity & Access Management (IAM).
• AI & Agentic Governance: Define threat models, security controls, and governance frameworks for AI agents, MCP servers, and LLM tooling—covering short-lived access, delegated permissions, tool scoping, and exfiltration prevention.
• Low-Code / No-Code Automation: Architect and operate security orchestration workflows on low-code/no-code platforms to enforce policy, remediate risks, and monitor compliance metrics at scale.
• Vendor Evaluation & Build vs. Buy: Lead vendor selection and architecture reviews for enterprise security platforms; assess commercial tools against strict compliance standards (SOC 2, ISO 27001) and integrate them via APIs.
• Secure-by-Design Partnership: Embed zero-trust security controls into IT systems, DevOps workflows, and enterprise application deployments without slowing cross-functional partners down.
• Technical Mentorship: Mentor senior security engineers, conduct threat modeling reviews, and influence technical plans across executive and cross-functional leadership.

Requirements

Security Experience & AI Governance

• 10+ years of progressive information security experience, with a proven track record of leading cross-functional technical security initiatives.
• Hands-on experience securing AI systems and agentic workflows—including agent identity/authorization, MCP tool access controls, prompt injection defense, data exfiltration prevention, and AI governance frameworks.
• Deep expertise in core IAM protocols and architectures: SSO, MFA/passkeys, OAuth 2.0, SAML, SCIM, privileged access management (PAM), and machine identities.
• Demonstrated experience designing, operating, or scaling security workflows using low-code/no-code automation platforms.
• Comprehensive knowledge of endpoint protection, SaaS governance, supply chain security, Zero Trust architecture, and compliance standards (SOC 2, ISO 27001).

Soft Skills & Work Logistics

• Strategic mindset with the ability to balance strict security rigor with business pragmatism.
• Strong collaborative presence capable of influencing engineering and IT partners.
• Ability to work onsite 3 days per week (Tuesdays, Wednesdays, Thursdays) at Roblox HQ in San Mateo, CA.
• Note: Roblox may not be able to support certain visa categories or future H-1B sponsorship for this position.

Preferred Qualifications

• Ability to read and write automation scripts (Python or similar languages).
• Hands-on experience with enterprise tools: Google Workspace, Okta, and OSQuery.
• Experience designing security architectures for large-scale consumer-tech or gaming enterprise environments.

Total Rewards & Workplace Benefits

• Compensation: Base salary of $320,880 – $365,710 USD + comprehensive long-term equity grant package.
• Healthcare & Wellness: Comprehensive medical, dental, and vision coverage options; mental health resources and wellness stipends.
• Financial Security: 401(k) program with company matching; life and disability insurance.
• Time Off & Work Culture: Generous PTO policies, observed holidays, and hybrid workplace flexibility.