Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive

digital experiences– all created by our global community of developers and creators.

At Roblox, we’re building the tools and platform that empower our community to bring any experience that they can imagine to life.

Our vision is to reimagine the way people come together, from anywhere in the world, and on any device. We’re on a mission to

connect a billion people with optimism and civility, and looking for amazing talent to help us get there.

A career at Roblox means you’ll be working to shape the future of human interaction, solving unique technical challenges at scale,

and helping to create safer, more civil shared experiences for everyone.

As a founding member of the Security Operations team in EMEA, you will join us at an exciting time in Roblox’s SIRT & SOC program.

You will design and build the detections, automation and tooling that let a lean team monitor and protect players, developers,

employees and the platform at global scale and serve as security incident commander in the region. This is a highly autonomous

role where you will be a primary decision-maker, core to our mission to maintain a highly capable 24/7/365 monitoring and response

capability.

While you will work in close collaboration with peers at our US West Coast Headquarters, the time difference requires an engineer

who can operate independently, making critical decisions without immediate oversight. We favor engineering our way out of toil

through automation, orchestration, detections-as-code, and risk-based prioritization, while retaining the deep technical skills

required to conduct detailed, hands-on analysis and lead response end-to-end when the situation warrants.

Work Environment: This role is based in London, UK. You will be working from a dedicated, private space located within a shared

office environment, designed to enable collaboration while remaining secure.

YOU WILL:

Build Detection & Response Systems: Design, write, and maintain production-quality detections, automations and integrations

(detections-as-code, SOAR playbooks, data and enrichment pipelines) that scale our monitoring capability and reduce manual

toil.

Own Tooling & Platform: Develop and improve the tooling the global SIRT/SOC depends on alert quality and enrichment,

case-management integrations and automation that powers reliable "follow-the-sun" hand-offs.

Exercise High Autonomy: Act as the primary Incident Commander for the European time zone, making critical, time-sensitive

decisions independently before US HQ comes online. You will serve as the senior-most security engineering point of contact in

the region.

Drive Strategy & Architecture: Shape the technical direction of the detection & response engineering function, specifically

architecting how global hand-offs and "follow-the-sun" models can be optimized and automated.

Command Security Incidents: Ensure serious threats and impacts are understood, mitigated, and learned from with speed and

professionalism, often leading responses end-to-end without immediate escalation paths during local hours — and turning what

you learn into durable, automated detections.

Conduct Forensic Investigations & Threat Hunt: Dig into complex context to determine whether threats exist, take decisive

action and proactively hunt for anomalous activity in our signals, distinguishing outliers from threats.

Lead High-Profile Responses: Collaborate with Security and Engineering to lead responses to major vulnerabilities or

platform-wide events.

Collaborate Cross-Functionally: Work with Legal, HR, Executive teams, and external partners (Developers & Customers). You will

also travel semi-regularly to the USA to visit HQ, ensuring deep alignment with central engineering and security leadership.

YOU HAVE:

Experience: 10+ years across security engineering, Infosec, IT, Infra/SRE, and/or Incident Response.
Specialization: 7+ years specifically in Detection or Response, with a track record of building, writing detections, automation

or security tooling, not solely operating.

Engineering Proficiency: Comfortable writing and reviewing production-quality code (Scripting) and building automations,

integrations and data pipelines that others depend on.

Autonomous Leadership: Proven ability to work independently in satellite offices or distributed teams. You are comfortable

being the "person in charge" during your shift and making calls that impact the business.

Incident Command: Extensive experience operating as an incident commander. You can flex into deep engineering work but also

possess the executive presence to coordinate responders and communicate status to leadership.

Investigations: Expert-level capability investigating threats in enterprise and production environments, taking ownership from

identification to resolution.

Knowledge/Tools/Techniques: Deep understanding of security tooling (SIEM, EDR, IDS/IPS, NDR, SOAR) and experience extending or

building on it. You are proficient in applying Incident Response frameworks (NIST IR Lifecycle, Cyber Kill Chain, MITRE ATT&CK)

to real-world scenarios, and you collaborate effectively with engineering colleagues, leveraging extensive expertise across

infrastructure and technologies (Public Cloud, OS, Virtualization, Containerization, Networking, Build/Development

infrastructure, and Hardware).

Education: Bachelor's degree in Computer Science, Cybersecurity, or a related technical field; advanced degree preferred or

equivalent experience.

YOU ARE:

A Builder-Operator: You would rather automate a problem out of existence than staff around it and you hold yourself to an

engineering bar even under incident pressure.

A Strategic Self-Starter: You don't wait for instructions. You identify gaps in coverage — especially those unique to regional

or time-zone-specific challenges — and fix them.

A Detailed Thinker: You enjoy exploring the details and considering the second- and third-order effects of your decisions.
An Eager Problem Solver: You are drawn to complex issues rather than avoidant of them.
Emboldened to Make Change: You instinctively ask what you can do to improve the situation rather than waiting to be prompted.
Compelled by our Mission: You are driven by the opportunity to protect our community and the safe space we've created.
A Calculated Risk Taker: You move fast, navigating reasonable risks to take action and build capabilities as quickly as

possible.

Roles that are based in an office are onsite Tuesday, Wednesday, and Thursday, with optional presence on Monday and Friday (unless

otherwise noted).

Roblox provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and

harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected

veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or

local laws. Roblox also provides reasonable accommodations to candidates with qualifying disabilities or religious beliefs during

the recruiting process.

For US based roles only, please note the Company may not be able to employ candidates for this role who have United States work

authorization related to certain U.S. visa categories, or support future H-1B sponsorship at this time.

Roll

Senior Security Engineer, Detection and Response

Kategori

Data/IT

Plats

London, Storbritannien

Publicerad

17 juli

Sista ansökningsdag

16 augusti

Källa

Arbetsgivarens hemsida

Liknande jobb

Senior Security Assurance Engineer (Internal Penetration Testing)

Qube Research & Technologies•London

Qube Research & Technologies (QRT) is a global quantitative and systematic investment manager, operating in all liquid asset classes across the world. We are a technology and data driven group implementing a scientific approach to investing. Combining data, research, technology, and trading expertise has shaped our collaborative mindset, which enables us to solve the most complex challenges. QRT’s culture of innovation continuously drives our ambition to deliver high quality returns for our investors. The Security Assurance team is responsible for identifying, assessing, and validating security risks across QRT’s technology environment. The team works closely with Security Engineers, Software Engineers, Infrastructure Engineers, Cloud Engineers, and Technology stakeholders to evaluate the effectiveness of security controls and strengthen the firm's overall security posture through adversarial testing and assurance activities. Your Future Role within QRT You will: * Conduct internal penetration testing across a wide range of systems, including trading infrastructure, cloud platforms, APIs, and business applications in both Windows and Linux environments. * Perform red team-style assessments and adversarial simulations to identify weaknesses in detection, response, and resilience capabilities. * Design and execute security assurance strategies to validate the effectiveness of security controls across applications, infrastructure, and cloud environments. * Coordinate external penetration testing engagements with third-party security vendors, including scoping, execution oversight, validation of findings, and remediation tracking across cloud, infrastructure, and application environments. * Identify, exploit, and clearly document vulnerabilities, providing actionable remediation guidance tailored to engineering teams. * Collaborate with product security and development teams to ensure vulnerabilities are properly remediated. * Support threat modelling exercises by providing an attacker’s perspective on system design and architecture. * Develop and maintain tooling, scripts, and frameworks to automate testing and improve coverage of security assessments. * Contribute to continuous security testing within CI/CD pipelines, including validation of SAST/DAST findings and runtime security controls. * Conduct security reviews of internal and third-party systems, validating real-world exploitability of identified risks. * Provide mentorship and training to engineers on common attack vectors, exploitation techniques, and secure design principles. * Stay current with emerging threats, vulnerabilities, and offensive security techniques relevant to financial systems and low-latency environments. Your present skillset: * 5+ years of experience in penetration testing, red teaming, or security assurance roles, with hands-on experience testing complex, large-scale systems. * Strong practical knowledge of offensive security techniques, including web application, API, network, and cloud exploitation. * Solid understanding of system internals, networking, and common vulnerability classes, including OWASP Top 10, logic flaws, authentication and authorisation issues, and race conditions. * Familiarity with both Windows and Linux environments from an attacker’s perspective. * Experience using standard penetration testing tools such as Burp Suite, Metasploit, Nmap, BloodHound, and similar offensive security tooling. * Ability to assess the real-world impact of vulnerabilities and prioritise risks in a high-stakes environment. * Ability to clearly document findings, explain exploitability, and provide practical remediation guidance to engineering and infrastructure teams. * Strong communication skills, with the ability to clearly articulate technical risks and remediation strategies to engineering stakeholders. * Ability to operate independently, manage multiple assessments, and provide senior-level technical judgement during security assurance activities. * Preferred: * Experience testing applications and services developed in languages such as Python, C++, Rust, Go, and Kotlin/Java. * Experience with cloud security testing across AWS or Azure, including IAM, network configuration, storage, managed services, and common cloud misconfigurations. * Experience developing custom penetration testing tools, automation, scripts, exploits, or fuzzers. * Experience integrating security testing into CI/CD pipelines or supporting continuous assurance practices. * Understanding of detection and response mechanisms, with the ability to evaluate or bypass them during controlled testing. * Experience conducting red team exercises, adversary simulations, or purple team engagements. * Experience with containerised environments, Kubernetes, infrastructure-as-code, or hybrid cloud infrastructure. * Knowledge of low-latency systems, financial trading environments, or high-performance distributed systems. * Relevant certifications such as OSCP, OSEP, OSCE, CRTO, CCT APP, CCT INF, or equivalent practical experience. QRT is an equal opportunity employer. We value diversity as essential to our success and are committed to creating an environment where employees can work openly, respectfully, and collaboratively. In addition to supporting professional achievement, QRT offers initiatives and programmes designed to help employees maintain a healthy work-life balance.

Sista ansökan: 16 aug.Publicerad: 5 juni

Senior Staff Software Engineer - Delta

Databricks•London

P-1127 At Databricks, we are obsessed with enabling data teams to solve the world's toughest problems, from security threat detection to cancer drug development. We do this by building and running the world's best data and AI infrastructure platform, so our customers can focus on the high value challenges that are central to their own missions. Our engineering teams build highly technical products that fulfill real, important needs in the world. We develop and operate one of the largest scale software platforms. The fleet consists of millions of virtual machines, generating terabytes of logs and processing exabytes of data per day. At our scale, we regularly observe cloud hardware, network, and operating system faults, and our software must gracefully shield our customers from any of the above. The Delta DML team owns the core write-path operations for Delta Lake, the open-source storage layer behind the Databricks Lakehouse. Our mission is to deliver industry-leading performance and a seamless user experience at massive scale, with most data written in Databricks flowing through our platform. We drive performance innovations like Low Shuffle Merge and Deletion Vectors and actively contribute to open source efforts to unify Delta and Iceberg formats. We are seeking a highly skilled and experienced Senior Staff Software Engineer to join our backend team. In this role, you will be instrumental in designing, developing, and maintaining robust backend systems that power Databricks workspaces. You will build the next-generation platform for serving workspace assets, ensuring high QPS, low latency, reliable, and performant systems, proactively addressing the future growth challenges. Additionally, as a senior member of the team, you will provide technical leadership, mentorship, and guidance to junior engineers, contributing to the overall improvement of team coding practices and system designs. The Impact you will have: * Solve real business needs at large scale by applying your software engineering. * Low level systems debugging, performance measurement, and optimization on large production clusters. * Build architecture design, influence product roadmap, and take ownership and responsibility over new projects. * Introduce tools to allow greater automation and operability of services. * Use your deep experience to help prevent and investigate production issues. * Plan and lead complicated technical projects that work with several teams within the company. * Contribute as a technical team lead by mentoring others, lead sprint planning, delegating work and assignments to team members and participate in project planning. What we look for: * 15+ years industry experience building and supporting large-scale distributed systems. * Comfortable working towards a multi-year vision with incremental deliverables. * Motivated by delivering customer value and impact. * Strong foundation in algorithms and data structures and their real-world use cases. * Experience driving company initiatives towards customer satisfaction. * BS/MS/PhD in Computer Science or related majors, or equivalent experience. About Databricks Databricks is the data and AI company. More than 10,000 organizations worldwide — including Comcast, Condé Nast, Grammarly, and over 50% of the Fortune 500 — rely on the Databricks Data Intelligence Platform to unify and democratize data, analytics and AI. Databricks is headquartered in San Francisco, with offices around the globe and was founded by the original creators of Lakehouse, Apache Spark™, Delta Lake and MLflow. To learn more, follow Databricks on Twitter, LinkedIn and Facebook. Benefits At Databricks, we strive to provide comprehensive benefits and perks that meet the needs of all of our employees. For specific details on the benefits offered in your region click here. Our Commitment to Diversity and Inclusion At Databricks, we are committed to fostering a diverse and inclusive culture where everyone can excel. We take great care to ensure that our hiring practices are inclusive and meet equal employment opportunity standards. Individuals looking for employment at Databricks are considered without regard to age, color, disability, ethnicity, family or marital status, gender identity or expression, language, national origin, physical and mental ability, political affiliation, race, religion, sexual orientation, socio-economic status, veteran status, and other protected characteristics. Compliance If access to export-controlled technology or source code is required for performance of job duties, it is within Employer's discretion whether to apply for a U.S. government license for such positions, and Employer may decline to proceed with an applicant on this basis alone.

Sista ansökan: 16 aug.Publicerad: 17 juli

Senior Infrastructure Engineer

Valarian•London

Valarian Technologies is a dual-use technology company building critical tools to safeguard the future in an era of evolving global security challenges. We're rethinking security beyond traditional military domains, addressing asymmetric threats that impact our technological advantage, economic strength, and democratic institutions. We build Acra – the platform foundation for everything we do as a dual-use technology company. The platform’s name, rooted in the Greek word for citadel (or, fortress), reflects the design and purpose of our infrastructure-agnostic secure enclaves: protecting critical data. Some of the government and commercial workflows include: increased operational resiliency for mission-critical systems and functions; enabling organisations to more quickly and widely adopt emerging technologies while ensuring the integrity of their intellectual property; information flow during disaster response scenarios, and zero-trust / least-privilege environments for M&A, attorney-client privileged communications, etc. And we’ve only scratched the surface. At our core, we're driven by a shared mission and a belief in making a tangible impact on our world. Whether you join our London HQ or the wider global organisation, you’ll be a part of collaborative, high-performing teams, creating cutting-edge software, platforms, and infrastructure. The Role We are looking for a Senior Infrastructure Engineer to own and evolve the foundational infrastructure layer behind ACRA. This is a deep infrastructure role. You will work across Kubernetes, Linux, networking, storage, service-to-service communication, observability, security boundaries, and production operations. You will be responsible for the systems that everything else depends on: clusters, networks, storage layers, ingress and egress paths, runtime infrastructure, deployment foundations, and operational reliability. Infrastructure is part of the product at Valarian. ACRA only works if the underlying infrastructure is secure, observable, debuggable, resilient, and able to run across cloud, on-premise, bare-metal, sovereign, air-gapped, and customer-managed environments. We are looking for someone with strong judgement and real production experience. This role values depth, operational correctness, and careful decision-making. You should be comfortable going deep into complex operational problems, understanding failure modes, debugging under pressure, and improving the reliability of the whole platform. You should be comfortable operating close to the metal: debugging Kubernetes, understanding networking behaviour, reasoning about distributed storage, improving observability, and helping define the infrastructure patterns that ACRA will rely on as it scales. This is not a generic DevOps support role, cloud administration role, or internal IT role. You will be a critical engineer in the team responsible for the infrastructure foundations of a high-trust platform. What you’ll do: Design, build, operate, and improve Kubernetes-based infrastructure for ACRA. Own core infrastructure plumbing across networking, storage, workload scheduling, service communication, ingress, egress, DNS, certificates, and cluster-level security. Operate and debug production Kubernetes environments across GCP, on-premise, bare-metal, sovereign cloud, air-gapped, and customer-managed deployments. Work on multi-cluster Kubernetes environments, cluster networking, network policy, service mesh, and secure service-to-service communication. Operate and evolve distributed storage systems, including storage classes, CSI drivers, capacity planning, replication, recovery, and failure handling. Work with infrastructure technologies such as Kubernetes, Linux, Cilium, eBPF, Istio, Rook Ceph, Terraform, Argo CD, GitOps, Helm, and related CNCF tooling. Build infrastructure automation that improves repeatability, reliability, and operational safety. Improve observability across infrastructure layers, including metrics, logs, traces, alerting, dashboards, and operational runbooks. Investigate and resolve complex production issues across networking, storage, Kubernetes, Linux, and application infrastructure. Contribute to incident response, root-cause analysis, capacity planning, disaster recovery, and production readiness. Define infrastructure standards, operational boundaries, security controls, and deployment patterns across the platform. Work closely with engineering teams to make services easier to deploy, operate, monitor, and debug. Contribute to the long-term technical direction of the DevOps department and the infrastructure foundations of ACRA. What we are looking for:

Sista ansökan: 22 aug.Publicerad: 29 maj