Senior Platform Security Engineer - Cloud & Linux

Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect across 3D immersive digital experiences.

As a Senior Security Software Engineer on the Infrastructure Security team, you will report to the Senior Manager of Infrastructure Security and play a key role in shaping the future of Platform Security at Roblox. In this high-impact technical role, you will identify security gaps across cloud and on-premise infrastructure, establish "secure by default" configurations and guardrails for engineering teams, and partner with Production IAM, Network Security, Cloud Security, and GRC teams to meet regulatory compliance requirements at massive scale.

Key Responsibilities

• Infrastructure Hardening & Guardrails: Introduce secure-by-default configurations, automated guardrails, and architectural blueprints for all developers across Roblox.
• Threat Identification & Gap Analysis: Proactively uncover security vulnerabilities, architectural gaps, and threat vectors across on-premise data centers and multi-cloud environments.
• Compliance & Policy Governance: Partner closely with Governance, Risk, and Compliance (GRC) teams to author infrastructure security policies and ensure adherence to industry standards and regulatory frameworks.
• Cross-Functional Collaboration: Partner with InfoSec peers (AppSec, Detection & Response, CloudSec, NetSec) and core Infrastructure engineering teams to drive secure engineering outcomes.
• Pragmatic Build vs. Buy Strategy: Evaluate third-party vendor security tools against in-house software solutions to resolve infrastructure security requirements efficiently.

Requirements

Practical Experience & Technical Skills

• 5+ years of hands-on software engineering or relevant technical infrastructure security experience.
• Deep technical expertise across Linux operating systems, container security concepts, and Kubernetes (EKS, GKE, AKS, or RKS).
• Practical experience with infrastructure-as-code (IaC), automated system hardening, cloud security policies, and observability frameworks.
• Solid understanding of Public Key Infrastructure (PKI), data encryption standards (at-rest and in-transit), secrets management, and orchestration engines (Nomad, ECS, or Chef).
• Strong grasp of core network security principles, application security concepts, and information security industry best practices.

Soft Skills & Work Logistics

• Strong collaborative mindset with a track record of partnering across engineering and security organizations.
• Ability to navigate ambiguity, analyze telemetry, and make sound security decisions with incomplete information.
• Ability to work onsite 3 days per week (Tuesdays, Wednesdays, Thursdays) at Roblox HQ in San Mateo, CA.
• Note: Roblox may not be able to support certain visa categories or future H-1B sponsorship for this position.

Preferred Qualifications

• Experience securing large-scale distributed systems in consumer-internet or gaming environments.
• Hands-on experience with secrets management platforms (e.g., HashiCorp Vault) and automated container vulnerability scanning.

Total Rewards & Workplace Benefits

• Compensation: Base salary of $233,570 – $269,170 USD + comprehensive long-term equity grant package.
• Healthcare & Wellness: Comprehensive medical, dental, and vision coverage options; mental health resources and wellness stipends.
• Financial Security: 401(k) program with company matching; life and disability insurance.
• Time Off & Work Culture: Generous PTO policies, observed holidays, and hybrid workplace flexibility.