Software Engineering Manager - Application Security

Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect across 3D immersive digital experiences. Building a platform that connects a billion people requires embedding security directly into how software is designed, built, and deployed at scale.

As Engineering Manager of Application Security, you will lead and grow a dedicated team of AppSec engineers responsible for protecting Roblox’s products, cloud services, microservices, and development ecosystem. Reporting to the Senior Manager of Application Security, you will balance hands-on security leadership with strategic investments in automated developer tooling, secure SDLC practices, and DevSecOps integrations. You will partner closely with engineering and infrastructure teams across the company to reduce vulnerabilities and protect platform assets while maintaining high engineering velocity.

Key Responsibilities

• AppSec Team Leadership: Recruit, lead, and mentor a high-performing team of Application Security engineers, establishing clear career paths, performance goals, and operational excellence.
• Secure SDLC & Security Architecture: Drive security initiatives across all stages of the software development lifecycle, establishing secure design reviews, threat modeling, static/dynamic code analysis (SAST/DAST), and penetration testing cadences.
• DevSecOps & Developer Automation: Build and scale automated security controls, guardrails, and developer tooling directly into modern CI/CD pipelines, container registries, and cloud deployment environments.
• Cross-Functional Risk Reduction: Partner with software engineering and cloud infrastructure teams to identify software risks, remediate OWASP Top 10 vulnerabilities, and establish secure coding baselines.
• Strategic Program Execution: Drive multi-quarter security programs from strategy and tooling selection through engineering rollout and company-wide adoption.
• Developer Enablement & Velocity: Bridge technical security requirements with developer productivity, enabling engineering teams to ship features quickly and safely.

Requirements

Application Security & Engineering Management Depth

• 8+ years of progressive professional experience in Information Security, with a deep specialization in Application Security or Product Security.
• 2+ years of direct people management experience leading and growing software or security engineering teams.
• Secure SDLC & Program Delivery: Proven track record driving security programs across the end-to-end software development lifecycle in fast-paced engineering environments.
• Vulnerability & Secure Code Expertise: Solid mastery of common software vulnerabilities (OWASP Top 10, CWEs), remediation patterns, threat modeling, and secure coding frameworks.
• Modern Cloud & CI/CD Ecosystems: Practical experience securing microservices, containerized applications, and cloud-native environments (AWS/GCP, Docker, Kubernetes) integrated with automated CI/CD pipelines.
• Cross-Functional Collaboration: Outstanding communication and leadership skills to align security priorities with engineering velocity and business objectives.

Preferred Qualifications

• Prior experience building in-house AppSec automation, AST integrations, or developer-facing security platforms at massive consumer scale.
• Familiarity with bug bounty program management, secure software supply chain controls (SBOA, dependency management), and API gateway security.
• Hands-on background in software development (Go, C++, Python, Java) prior to moving into security management.

Total Rewards & Benefits

• Compensation & Equity: Annual base salary range of $295,250 – $345,040 USD + comprehensive equity compensation package.
• Healthcare & Wellness: Comprehensive medical, dental, and vision insurance coverage options for employees and eligible dependents.
• Retirement & Financial: 401(k) retirement savings plan with employer match, life insurance, and flexible spending accounts.
• HQ Campus Perks: On-site catered meals, modern collaborative workspaces, learning and development stipends, and team events.