Senior/Principal software Engineer - Vulnerability Research

The Engine Security team focuses on solving complex engineering challenges to protect Roblox Engine from potential malicious users and attackers. As a Software Engineer specializing in Vulnerability Research within the Engine Security team, your role will encompass several key responsibilities:

You Will:

• Report directly into the Engineering Manager
• Research and identify dangerous vulnerabilities in Roblox engine software architecture (C++/Lua)
• Develop new tools to automate vulnerability discovery and configure/utilize existing ones for static code analysis and fuzzing
• Review code and system designs manually or in a more freestyle approach, using your security knowledge and experience to improve security
• Communicate, document, prioritize, and actively drive the mitigation of security issues
• Collaborate with Roblox engineering and information security teams to help mitigate flaws in software and systems
• Debug security issues
• Research, design, and apply advanced techniques for building secure systems
• Contribute to the establishment of a vulnerability management program, the development of secure development guidelines, and the implementation of a security review process

You Have:

• Threat Modeling: You will actively contribute to threat modeling efforts, enhancing our understanding of potential vulnerabilities
• Vulnerability Research: You will conduct research using security testing tools and a more manual approach
• Vulnerability Management: You will review on vulnerabilities, prioritize them based on impact and apply mitigation mechanisms to effectively manage them
• Issue Debugging: You will resolve issues, including engine security bugs reported through our Bug Bounty program

You will have a unique opportunity to work with some of the industry's most security software engineers within our expanding Engine team.

• Proficiency: You're a software engineer with substantial experience in C++.
• Security Expertise: You have more than 5 years of in-depth technical knowledge of common security vulnerabilities and risks.
• Technical Understanding: You have a grasp of C++ memory vulnerabilities, Linux local privilege escalation, and container escapes.
• Threat awareness: You have expertise in application threat modeling, vulnerability research, risk assessment, and security testing.
• Mitigation strategies: You are experienced in developing strategies to mitigate software and system vulnerabilities.
• Engine/platform focus: You are enthusiastic about developing security mechanisms from scratch to protect a game engine or a similar platform, and you are comfortable developing cross-platform code.