This job might no longer be available.

Security Engineering Lead

InfoSec has critical responsibilities at Roblox: We partner to engineer and design secure systems from inception to operationalization; we set policies and processes; we train peer engineering teams in secure methods and ways. The Security Engineering Lead will have a key role in developing InfoSec’s capability to build and prototype solutions with partner engineering teams, as well as operate core InfoSec infrastructure.

People managers in the Information Security org will have:

- a deep understanding of technology and security that can fast-track great solutions and inspire respect;

- a human-centered approach to managing and leading; and

- ability to guide conversations and broker good decisions cross-functionally with managers/leaders through the company. Excellent communication skills, as well as the ability to draw a picture of future vision and the steps to get there, are also highly valued

As an early InfoSec leader, you will have the opportunity to be an innovator and foundational member on the InfoSec team at Roblox who can help instill our values and set the bar for excellence, defining the group — and the company — for years to come. We are looking for smart people who work well with others who want to apply their passion for protecting communities to grow a leading-edge security program. Come join us in building the best trusted all-ages gaming and exchange platform. In doing so, we provide

Responsibilities

1. Development of a new Security Engineering pod
2. Engineering and operation of critical security infrastructure, such as
1. Security logging and Alerting systems
2. SSL automation
3. Internal consumer portal
4. Dashboarding
5. Secure libraries and frameworks, esp for roles and groups auditing/parign and fine-grained data access.
3. Understanding of core network security goals
4. Understanding of Security IR and dependence on good security monitoring and alerting
5. Potential participation in general InfoSec IR
6. Contribute and communicate practical risk analysis for prioritizations, both for roadmap and emergent issues.
7. Security Education and Training - preparation of materials and communication through diverse parts of the org. Contribution to security awareness programming.
8. Metrics development
9. Security program development

Requirements

1. BA/BS degree in a relevant engineering field or equivalent practical experience
2. Self-organized and comfortable working in a fast-paced environment.
3. Experience supporting security best practices within a large scale Internet environment.
4. Working knowledge of two or more scripting/programming languages. Proficiency in at least one scripting language like Python, shell, or Lua
5. Knowledge of cryptography, PKI, TLS as well as practical implementation of the same
6. Experience with networking and network security principles.
7. Experience with various operating systems.
8. Experience with AWS and cloud best practices
9. Experience with containers (Docker, Windows Server)
10. Level Depending On Experience

Nice To Have

• Experience with Hashistack
• Experience with Kubernetes
• Experience with some compliance reporting, esp. In PCI and/or ITGC.
• Familiarity with Privacy (GDPR, CA AB-375) and COPPA
• Relevant certifications, i.e. CISSP, CEH, GSEC, GIAC, CISM, Stanford Advanced Security Certificate Program, OWASP, CSSLP, etc.