Software Engineering Manager - Enterprise Security

Every day, tens of millions of people come to Roblox to explore, create, play, and connect across 3D immersive digital experiences. Protecting the corporate infrastructure that underpins this global ecosystem is paramount.

As the Engineering Manager for Enterprise Security, you will serve as a hands-on "player-coach" leading the team responsible for designing, building, and operating software systems that secure Roblox's corporate endpoints, internal networks, identity frameworks, and supply chain. Reporting to the Senior Manager of Enterprise Security and IAM, you will manage software engineers writing security platforms in Python, Go, or Rust. You will set the technical strategy for AI security—including AI agent sandboxing, Model Context Protocol (MCP) server access, and short-lived credentials—while leveraging AI automation to accelerate threat triage, code reviews, and policy enforcement.

Key Responsibilities

• Team Leadership & Development: Hire, coach, and develop a high-performing team of security software engineers. Conduct code and design reviews, manage performance, and cultivate a systems-first engineering culture.
• Enterprise Security Strategy: Define and execute the enterprise security roadmap spanning endpoint security, network segmentation, Zero Trust access, and identity infrastructure.
• AI Security & AI for Security: Establish safety controls for enterprise AI deployments (AI agent sandboxing, MCP server authorization, data access boundary controls) and implement AI-driven automation for incident triage and security reviews.
• Enterprise Supply Chain Protection: Own supply chain security risks across software packages, third-party SaaS integrations, vendor API connections, and contractor/BPO access boundaries.
• Zero Trust & IAM Architecture: Partner with Corporate Engineering, DevOps, and IT to build identity-aware network controls, least-privilege access patterns, and automated session management into developer workflows.
• Executive & Cross-Functional Alignment: Collaborate with InfoSec leadership and cross-functional partners to report risk exposure and balance security rigor with operational velocity.

Requirements

Experience & Technical Background

• 8+ years combining software engineering and information security experience, including 2+ years directly managing software or security engineering teams.
• Current hands-on proficiency in at least one systems or backend programming language: Python, Go, or Rust.
• Deep background across two or more domain areas: Endpoint Security, Network Security, Enterprise Application Security, or Identity & Access Management (IAM).

Architecture & Protocol Fluency

• Hands-on understanding of identity and authentication standards (OAuth 2.0, OIDC, SAML 2.0, SCIM 2.0) and experience threat-modeling systems built on them.
• Proficiency in secure system design primitives: session management, fine-grained authorization, audit logging, rate limiting, and secret management.
• Deep understanding of Zero Trust architecture, device trust, and least-privilege network access.

Preferred Qualifications

• Experience with policy-as-code or fine-grained authorization frameworks (OPA/Rego, Cedar, Zanzibar/ReBAC).
• Hands-on deployment experience with FIDO2/WebAuthn and passkeys.
• Deep knowledge of endpoint security controls (EDR, MDM, OS hardening), network microsegmentation, or SaaS security posture management.

Total Rewards & Workplace Benefits

• Compensation: Base salary of $293,800 – $343,340 USD + comprehensive long-term equity grant package.
• Healthcare & Wellness: Comprehensive medical, dental, and vision coverage options; mental health resources and wellness stipends.
• Financial Security: 401(k) program with company matching; life and disability insurance.
• Time Off & Work Culture: Generous PTO policies, observed holidays, and hybrid workplace flexibility.