Senior Security Software Engineer, Infrastructure Security

As a Senior Security Software Engineer for Infrastructure Security, you will be a part of the Information Security organization and report to the Senior Manager of Infrastructure Security. You will help shape the future of Platform Security at Roblox. We work closely with Production Identity and Access Management (IAM), Network Security, and Cloud Security teams at Roblox. 

You Will: 

• Identify security gaps and threats in our cloud and on premise infrastructure, partnering with Governance Risk and Compliance teams to create standards and policies along the way. This will help Roblox meet regulatory and compliance requirements.


• Harden our infrastructure by introducing secure by default configurations, designs and guardrails for all developers at Roblox.


• Own and drive solutions that enable Roblox engineers to design, build, and use infrastructure securely at scale.


• Work closely with other InfoSec teams (AppSec, D&R, GRC, CorpSec, CloudSec, NetSec) and partner with engineering teams across Roblox, specifically the Infrastructure organization, to ensure the secure outcomes of security and product driven initiatives. 

You Have:

• 5+ years of experience writing code and/or relevant technical experience.


• Experience with automation, IaC, system hardening, container security concepts, cloud security policy and observability.


• Deep knowledge of Linux systems, Kubernetes (EKS/GKE/AKS/RKS), and on premise and cloud based risk and supporting security infrastructure.


• Familiarity with Public Key Infrastructure (PKI), Data Encryption (at-rest and in-transit), platform security best practices, Secrets Management, and orchestration at scale with systems such as Chef, Nomad, and ECS.


• Understanding of network security, application security concepts, and information security industry best practices.

You Are:

• Collaborative: You love working with your direct team and cross-functional partners.


• Thoughtful of build vs. buy decisions: You can build solutions, but you also review what tools are available and are comfortable working with Third Party vendors.


• Comfortable with ambiguity: You can gather data and make informed decisions when there is no clear answer.