jobctl

Senior Security Engineer, Detection and Response

Roblox - London, England, United Kingdom - original posting ->
Status
Open
Remote policy
Not stated
Employment type
Not stated
Salary
Not stated
Categories
Software Engineering
Tech
securitysenior
Source
roblox
First observed
2026-08-11 23:51 UTC
Last seen
2026-10-04 07:47 UTC
Source claims posted
2026-07-06 14:49 UTC
Consecutive misses
0 of 3

What the posting says

Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences– all created by our global community of developers and creators.

At Roblox, we’re building the tools and platform that empower our community to bring any experience that they can imagine to life. Our vision is to reimagine the way people come together, from anywhere in the world, and on any device. We’re on a mission to connect a billion people with optimism and civility, and looking for amazing talent to help us get there.

A career at Roblox means you’ll be working to shape the future of human interaction, solving unique technical challenges at scale, and helping to create safer, more civil shared experiences for everyone.

As a founding member of the Security Operations team in EMEA, you will join us at an exciting time in Roblox’s SIRT & SOC program. You will design and build the detections, automation and tooling that let a lean team monitor and protect players, developers, employees and the platform at global scale and serve as security incident commander in the region. This is a highly autonomous role where you will be a primary decision-maker, core to our mission to maintain a highly capable 24/7/365 monitoring and response capability.

While you will work in close collaboration with peers at our US West Coast Headquarters, the time difference requires an engineer who can operate independently, making critical decisions without immediate oversight. We favor engineering our way out of toil through automation, orchestration, detections-as-code, and risk-based prioritization, while retaining the deep technical skills required to conduct detailed, hands-on analysis and lead response end-to-end when the situation warrants.

Work Environment: This role is based in London, UK. You will be working from a dedicated, private space located within a shared office environment, designed to enable collaboration while remaining secure.

You will:

Build Detection & Response Systems: Design, write, and maintain production-quality detections, automations and integrations (detections-as-code, SOAR playbooks, data and enrichment pipelines) that scale our monitoring capability and reduce manual toil.

Own Tooling & Platform: Develop and improve the tooling the global SIRT/SOC depends on alert quality and enrichment, case-management integrations and automation that powers reliable "follow-the-sun" hand-offs.

Exercise High Autonomy: Act as the primary Incident Commander for the European time zone, making critical, time-sensitive decisions independently before US HQ comes online. You will serve as the senior-most security engineering point of contact in the region.

Drive Strategy & Architecture: Shape the technical direction of the detection & response engineering function, specifically architecting how global hand-offs and "follow-the-sun" models can be optimized and automated.

Command Security Incidents: Ensure serious threats and impacts are understood, mitigated, and learned from with speed and professionalism, often leading responses end-to-end without immediate escalation paths during local hours — and turning what you learn into durable, automated detections.

Conduct Forensic Investigations & Threat Hunt: Dig into complex context to determine whether threats exist, take decisive action and proactively hunt for anomalous activity in our signals, distinguishing outliers from threats.

Lead High-Profile Responses: Collaborate with Security and Engineering to lead responses to major vulnerabilities or platform-wide events.

Collaborate Cross-Functionally: Work with Legal, HR, Executive teams, and external partners (Developers & Customers). You will also travel semi-regularly to the USA to visit HQ, ensuring deep alignment with central engineering and security leadership.

You have:

Experience: 10+ years across security engineering, Infosec, IT, Infra/SRE, and/or Incident Response.

Specialization: 7+ years specifically in Detection or Response, with a track record of building, writing detections, automation or security tooling, not solely operating.

Engineering Proficiency: Comfortable writing and reviewing production-quality code (Scripting) and building automations, integrations and data pipelines that others depend on.

Autonomous Leadership: Proven ability to work independently in satellite offices or distributed teams. You are comfortable being the "person in charge" during your shift and making calls that impact the business.

Incident Command: Extensive experience operating as an incident commander. You can flex into deep engineering work but also possess the executive presence to coordinate responders and communicate status to leadership.

Investigations: Expert-level capability investigating threats in enterprise and production environments, taking ownership from identification to resolution.

Knowledge/Tools/Techniques: Deep understanding of security tooling (SIEM, EDR, IDS/IPS, NDR, SOAR) and experience extending or building on it. You are proficient in applying Incident Response frameworks (NIST IR Lifecycle, Cyber Kill Chain, MITRE ATT&CK) to real-world scenarios, and you collaborate effectively with engineering colleagues, leveraging extensive expertise across infrastructure and technologies (Public Cloud, OS, Virtualization, Containerization, Networking, Build/Development infrastructure, and Hardware).

Education: Bachelor's degree in Computer Science, Cybersecurity, or a related technical field; advanced degree preferred or equivalent experience.

You are:

A Builder-Operator: You would rather automate a problem out of existence than staff around it and you hold yourself to an engineering bar even under incident pressure.

A Strategic Self-Starter: You don't wait for instructions. You identify gaps in coverage — especially those unique to regional or time-zone-specific challenges — and fix them.

A Detailed Thinker: You enjoy exploring the details and considering the second- and third-order effects of your decisions.

An Eager Problem Solver: You are drawn to complex issues rather than avoidant of them.

Emboldened to Make Change: You instinctively ask what you can do to improve the situation rather than waiting to be prompted.

Compelled by our Mission: You are driven by the opportunity to protect our community and the safe space we've created.

A Calculated Risk Taker: You move fast, navigating reasonable risks to take action and build capabilities as quickly as possible.

Roles that are based in an office are onsite Tuesday, Wednesday, and Thursday, with optional presence on Monday and Friday (unless otherwise noted).

Roblox provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. Roblox also provides reasonable accommodations to candidates with qualifying disabilities or religious beliefs during the recruiting process.

For US based roles only, please note the Company may not be able to employ candidates for this role who have United States work authorization related to certain U.S. visa categories, or support future H-1B sponsorship at this time.

Quality

Completeness: 45%
Honesty: 100%

Based on 102 observation(s).

Timeline

  1. *
    #12438 2026-08-11 23:51 UTC
    Published
  2. ~
    #17789 2026-08-12 07:51 UTC
    Modified
    • source_updated_at
      2026-08-11T14:44:12-04:00->2026-08-12T02:42:51-04:00
  3. ~
    #28453 2026-08-12 19:51 UTC
    Modified
    • source_updated_at
      2026-08-12T02:42:51-04:00->2026-08-12T14:46:48-04:00
  4. ~
    #40879 2026-08-13 07:52 UTC
    Modified
    • source_updated_at
      2026-08-12T14:46:48-04:00->2026-08-13T02:46:34-04:00
  5. ~
    #51472 2026-08-13 19:53 UTC
    Modified
    • source_updated_at
      2026-08-13T02:46:34-04:00->2026-08-13T14:47:34-04:00
  6. ~
    #59896 2026-08-14 07:54 UTC
    Modified
    • source_updated_at
      2026-08-13T14:47:34-04:00->2026-08-14T02:43:18-04:00
  7. ~
    #70176 2026-08-14 19:55 UTC
    Modified
    • source_updated_at
      2026-08-14T02:43:18-04:00->2026-08-14T14:46:21-04:00
  8. ~
    #91669 2026-08-15 19:55 UTC
    Modified
    • source_updated_at
      2026-08-14T14:46:21-04:00->2026-08-15T14:44:48-04:00
  9. ~
    #102110 2026-08-16 07:55 UTC
    Modified
    • source_updated_at
      2026-08-15T14:44:48-04:00->2026-08-16T02:42:11-04:00
  10. ~
    #113614 2026-08-16 19:56 UTC
    Modified
    • source_updated_at
      2026-08-16T02:42:11-04:00->2026-08-16T14:48:05-04:00
  11. ~
    #123999 2026-08-17 07:56 UTC
    Modified
    • source_updated_at
      2026-08-16T14:48:05-04:00->2026-08-17T02:43:15-04:00
  12. ~
    #136280 2026-08-17 19:42 UTC
    Modified
    • source_updated_at
      2026-08-17T02:43:15-04:00->2026-08-17T14:46:53-04:00
  13. ~
    #146827 2026-08-18 09:17 UTC
    Modified
    • source_updated_at
      2026-08-17T14:46:53-04:00->2026-08-18T02:43:08-04:00
  14. ~
    #159384 2026-08-18 21:00 UTC
    Modified
    • source_updated_at
      2026-08-18T02:43:08-04:00->2026-08-18T14:45:31-04:00
  15. ~
    #172715 2026-08-19 07:53 UTC
    Modified
    • source_updated_at
      2026-08-18T14:45:31-04:00->2026-08-19T02:46:32-04:00
  16. ~
    #193505 2026-08-19 19:27 UTC
    Modified
    • source_updated_at
      2026-08-19T02:46:32-04:00->2026-08-19T14:46:39-04:00
  17. ~
    #206466 2026-08-20 07:36 UTC
    Modified
    • source_updated_at
      2026-08-19T14:46:39-04:00->2026-08-20T02:46:47-04:00
  18. ~
    #223214 2026-08-20 20:23 UTC
    Modified
    • source_updated_at
      2026-08-20T02:46:47-04:00->2026-08-20T14:48:40-04:00
  19. ~
    #234971 2026-08-21 06:53 UTC
    Modified
    • source_updated_at
      2026-08-20T14:48:40-04:00->2026-08-21T02:44:51-04:00
  20. ~
    #254556 2026-08-21 19:50 UTC
    Modified
    • source_updated_at
      2026-08-21T02:44:51-04:00->2026-08-21T14:46:02-04:00
  21. ~
    #258779 2026-08-21 23:52 UTC
    Modified
    • source_updated_at
      2026-08-21T14:46:02-04:00->2026-08-21T16:10:33-04:00
  22. ~
    #281544 2026-08-22 21:12 UTC
    Modified
    • source_updated_at
      2026-08-21T16:10:33-04:00->2026-08-22T14:45:21-04:00
  23. ~
    #293231 2026-08-23 09:44 UTC
    Modified
    • source_updated_at
      2026-08-22T14:45:21-04:00->2026-08-23T02:42:27-04:00
  24. ~
    #303291 2026-08-23 21:11 UTC
    Modified
    • source_updated_at
      2026-08-23T02:42:27-04:00->2026-08-23T14:44:18-04:00
  25. ~
    #318423 2026-08-24 07:30 UTC
    Modified
    • source_updated_at
      2026-08-23T14:44:18-04:00->2026-08-24T02:43:45-04:00
  26. ~
    #338468 2026-08-24 22:19 UTC
    Modified
    • source_updated_at
      2026-08-24T02:43:45-04:00->2026-08-24T14:48:48-04:00
  27. ~
    #354245 2026-08-25 10:19 UTC
    Modified
    • source_updated_at
      2026-08-24T14:48:48-04:00->2026-08-25T02:44:04-04:00
  28. ~
    #363903 2026-08-25 19:02 UTC
    Modified
    • source_updated_at
      2026-08-25T02:44:04-04:00->2026-08-25T14:45:46-04:00
  29. ~
    #377478 2026-08-26 07:20 UTC
    Modified
    • source_updated_at
      2026-08-25T14:45:46-04:00->2026-08-26T02:43:42-04:00
  30. ~
    #387811 2026-08-26 22:35 UTC
    Modified
    • source_updated_at
      2026-08-26T02:43:42-04:00->2026-08-26T14:45:44-04:00
  31. ~
    #396856 2026-08-27 10:36 UTC
    Modified
    • source_updated_at
      2026-08-26T14:45:44-04:00->2026-08-27T02:45:07-04:00
  32. ~
    #407037 2026-08-27 22:36 UTC
    Modified
    • source_updated_at
      2026-08-27T02:45:07-04:00->2026-08-27T14:46:00-04:00
  33. ~
    #416764 2026-08-28 10:36 UTC
    Modified
    • source_updated_at
      2026-08-27T14:46:00-04:00->2026-08-28T02:45:47-04:00
  34. ~
    #429339 2026-08-28 23:17 UTC
    Modified
    • source_updated_at
      2026-08-28T02:45:47-04:00->2026-08-28T14:45:23-04:00
  35. ~
    #442022 2026-08-29 19:06 UTC
    Modified
    • source_updated_at
      2026-08-28T14:45:23-04:00->2026-08-29T14:42:50-04:00
  36. ~
    #456578 2026-08-30 07:48 UTC
    Modified
    • source_updated_at
      2026-08-29T14:42:50-04:00->2026-08-30T02:44:52-04:00
  37. ~
    #469350 2026-08-30 21:41 UTC
    Modified
    • source_updated_at
      2026-08-30T02:44:52-04:00->2026-08-30T14:42:15-04:00
  38. ~
    #477598 2026-08-31 09:19 UTC
    Modified
    • source_updated_at
      2026-08-30T14:42:15-04:00->2026-08-31T02:43:38-04:00
  39. ~
    #487352 2026-08-31 21:23 UTC
    Modified
    • source_updated_at
      2026-08-31T02:43:38-04:00->2026-08-31T14:43:50-04:00
  40. ~
    #496826 2026-09-01 09:23 UTC
    Modified
    • source_updated_at
      2026-08-31T14:43:50-04:00->2026-09-01T02:42:15-04:00
  41. ~
    #509078 2026-09-01 21:24 UTC
    Modified
    • source_updated_at
      2026-09-01T02:42:15-04:00->2026-09-01T14:44:08-04:00
  42. ~
    #523814 2026-09-02 09:24 UTC
    Modified
    • source_updated_at
      2026-09-01T14:44:08-04:00->2026-09-02T02:43:26-04:00
  43. ~
    #535452 2026-09-02 21:25 UTC
    Modified
    • source_updated_at
      2026-09-02T02:43:26-04:00->2026-09-02T14:45:00-04:00
  44. ~
    #547131 2026-09-03 09:25 UTC
    Modified
    • source_updated_at
      2026-09-02T14:45:00-04:00->2026-09-03T02:42:44-04:00
  45. ~
    #556669 2026-09-03 21:26 UTC
    Modified
    • source_updated_at
      2026-09-03T02:42:44-04:00->2026-09-03T14:45:08-04:00
  46. ~
    #567639 2026-09-04 09:26 UTC
    Modified
    • source_updated_at
      2026-09-03T14:45:08-04:00->2026-09-04T02:43:19-04:00
  47. ~
    #578332 2026-09-04 21:31 UTC
    Modified
    • source_updated_at
      2026-09-04T02:43:19-04:00->2026-09-04T14:44:29-04:00
  48. ~
    #592704 2026-09-05 19:42 UTC
    Modified
    • source_updated_at
      2026-09-04T14:44:29-04:00->2026-09-05T14:42:58-04:00
  49. ~
    #599277 2026-09-06 07:43 UTC
    Modified
    • source_updated_at
      2026-09-05T14:42:58-04:00->2026-09-06T02:42:07-04:00
  50. ~
    #606884 2026-09-06 19:43 UTC
    Modified
    • source_updated_at
      2026-09-06T02:42:07-04:00->2026-09-06T14:43:16-04:00
  51. ~
    #613115 2026-09-07 07:46 UTC
    Modified
    • source_updated_at
      2026-09-06T14:43:16-04:00->2026-09-07T02:42:46-04:00
  52. ~
    #622962 2026-09-07 19:47 UTC
    Modified
    • source_updated_at
      2026-09-07T02:42:46-04:00->2026-09-07T14:42:15-04:00
  53. ~
    #631383 2026-09-08 07:47 UTC
    Modified
    • source_updated_at
      2026-09-07T14:42:15-04:00->2026-09-08T02:43:33-04:00
  54. ~
    #641801 2026-09-08 19:49 UTC
    Modified
    • source_updated_at
      2026-09-08T02:43:33-04:00->2026-09-08T14:45:02-04:00
  55. ~
    #651336 2026-09-09 07:49 UTC
    Modified
    • source_updated_at
      2026-09-08T14:45:02-04:00->2026-09-09T02:43:47-04:00
  56. ~
    #662856 2026-09-09 19:54 UTC
    Modified
    • source_updated_at
      2026-09-09T02:43:47-04:00->2026-09-09T14:45:03-04:00
  57. ~
    #672795 2026-09-10 07:54 UTC
    Modified
    • source_updated_at
      2026-09-09T14:45:03-04:00->2026-09-10T02:43:52-04:00
  58. ~
    #685560 2026-09-10 19:55 UTC
    Modified
    • source_updated_at
      2026-09-10T02:43:52-04:00->2026-09-10T14:44:09-04:00
  59. ~
    #694280 2026-09-11 07:56 UTC
    Modified
    • source_updated_at
      2026-09-10T14:44:09-04:00->2026-09-11T02:42:36-04:00
  60. ~
    #706611 2026-09-11 21:18 UTC
    Modified
    • source_updated_at
      2026-09-11T02:42:36-04:00->2026-09-11T14:44:30-04:00
  61. ~
    #719972 2026-09-12 21:19 UTC
    Modified
    • source_updated_at
      2026-09-11T14:44:30-04:00->2026-09-12T14:43:19-04:00
  62. ~
    #726822 2026-09-13 09:19 UTC
    Modified
    • source_updated_at
      2026-09-12T14:43:19-04:00->2026-09-13T02:42:57-04:00
  63. ~
    #733234 2026-09-13 21:19 UTC
    Modified
    • source_updated_at
      2026-09-13T02:42:57-04:00->2026-09-13T14:43:05-04:00
  64. ~
    #740164 2026-09-14 09:28 UTC
    Modified
    • source_updated_at
      2026-09-13T14:43:05-04:00->2026-09-14T02:43:13-04:00
  65. ~
    #753187 2026-09-14 21:29 UTC
    Modified
    • source_updated_at
      2026-09-14T02:43:13-04:00->2026-09-14T14:43:52-04:00
  66. ~
    #764730 2026-09-15 09:29 UTC
    Modified
    • source_updated_at
      2026-09-14T14:43:52-04:00->2026-09-15T02:43:45-04:00
  67. ~
    #777373 2026-09-15 21:30 UTC
    Modified
    • source_updated_at
      2026-09-15T02:43:45-04:00->2026-09-15T14:44:11-04:00
  68. ~
    #788110 2026-09-16 09:30 UTC
    Modified
    • source_updated_at
      2026-09-15T14:44:11-04:00->2026-09-16T02:43:33-04:00
  69. ~
    #800498 2026-09-16 21:31 UTC
    Modified
    • source_updated_at
      2026-09-16T02:43:33-04:00->2026-09-16T14:44:23-04:00
  70. ~
    #810738 2026-09-17 09:32 UTC
    Modified
    • source_updated_at
      2026-09-16T14:44:23-04:00->2026-09-17T02:44:28-04:00
  71. ~
    #820332 2026-09-17 21:32 UTC
    Modified
    • source_updated_at
      2026-09-17T02:44:28-04:00->2026-09-17T14:44:08-04:00
  72. ~
    #830676 2026-09-18 09:36 UTC
    Modified
    • source_updated_at
      2026-09-17T14:44:08-04:00->2026-09-18T02:43:34-04:00
  73. ~
    #846897 2026-09-18 21:37 UTC
    Modified
    • source_updated_at
      2026-09-18T02:43:34-04:00->2026-09-18T14:44:26-04:00
  74. ~
    #867174 2026-09-19 21:38 UTC
    Modified
    • source_updated_at
      2026-09-18T14:44:26-04:00->2026-09-19T14:42:51-04:00
  75. ~
    #874470 2026-09-20 09:39 UTC
    Modified
    • source_updated_at
      2026-09-19T14:42:51-04:00->2026-09-20T02:42:31-04:00
  76. ~
    #882191 2026-09-20 21:40 UTC
    Modified
    • source_updated_at
      2026-09-20T02:42:31-04:00->2026-09-20T14:42:17-04:00
  77. ~
    #889077 2026-09-21 09:49 UTC
    Modified
    • source_updated_at
      2026-09-20T14:42:17-04:00->2026-09-21T02:42:59-04:00
  78. ~
    #905588 2026-09-21 21:49 UTC
    Modified
    • source_updated_at
      2026-09-21T02:42:59-04:00->2026-09-21T14:43:52-04:00
  79. ~
    #918840 2026-09-22 09:53 UTC
    Modified
    • source_updated_at
      2026-09-21T14:43:52-04:00->2026-09-22T02:43:25-04:00
  80. ~
    #930370 2026-09-22 21:53 UTC
    Modified
    • source_updated_at
      2026-09-22T02:43:25-04:00->2026-09-22T14:45:27-04:00
  81. ~
    #941182 2026-09-23 09:54 UTC
    Modified
    • source_updated_at
      2026-09-22T14:45:27-04:00->2026-09-23T02:43:49-04:00
  82. ~
    #956731 2026-09-23 21:54 UTC
    Modified
    • source_updated_at
      2026-09-23T02:43:49-04:00->2026-09-23T14:44:49-04:00
  83. ~
    #967258 2026-09-24 09:59 UTC
    Modified
    • source_updated_at
      2026-09-23T14:44:49-04:00->2026-09-24T02:44:57-04:00
  84. ~
    #980276 2026-09-24 22:03 UTC
    Modified
    • source_updated_at
      2026-09-24T02:44:57-04:00->2026-09-24T14:44:17-04:00
  85. ~
    #994235 2026-09-25 10:08 UTC
    Modified
    • source_updated_at
      2026-09-24T14:44:17-04:00->2026-09-25T02:43:13-04:00
  86. ~
    #1007555 2026-09-25 22:13 UTC
    Modified
    • source_updated_at
      2026-09-25T02:43:13-04:00->2026-09-25T14:44:28-04:00
  87. ~
    #1022996 2026-09-26 22:19 UTC
    Modified
    • source_updated_at
      2026-09-25T14:44:28-04:00->2026-09-26T14:43:19-04:00
  88. ~
    #1029604 2026-09-27 10:19 UTC
    Modified
    • source_updated_at
      2026-09-26T14:43:19-04:00->2026-09-27T02:42:32-04:00
  89. ~
    #1036613 2026-09-27 22:19 UTC
    Modified
    • source_updated_at
      2026-09-27T02:42:32-04:00->2026-09-27T14:42:51-04:00
  90. ~
    #1043821 2026-09-28 10:25 UTC
    Modified
    • source_updated_at
      2026-09-27T14:42:51-04:00->2026-09-28T02:43:46-04:00
  91. ~
    #1054373 2026-09-28 22:26 UTC
    Modified
    • source_updated_at
      2026-09-28T02:43:46-04:00->2026-09-28T14:44:12-04:00
  92. ~
    #1063540 2026-09-29 10:34 UTC
    Modified
    • source_updated_at
      2026-09-28T14:44:12-04:00->2026-09-29T02:43:55-04:00
  93. ~
    #1073224 2026-09-29 18:34 UTC
    Modified
    • source_updated_at
      2026-09-29T02:43:55-04:00->2026-09-29T13:30:22-04:00
  94. ~
    #1077206 2026-09-29 22:36 UTC
    Modified
    • source_updated_at
      2026-09-29T13:30:22-04:00->2026-09-29T16:09:38-04:00
  95. ~
    #1088399 2026-09-30 10:37 UTC
    Modified
    • source_updated_at
      2026-09-29T16:09:38-04:00->2026-09-30T02:43:38-04:00
  96. ~
    #1099721 2026-09-30 22:37 UTC
    Modified
    • source_updated_at
      2026-09-30T02:43:38-04:00->2026-09-30T14:44:38-04:00
  97. ~
    #1109378 2026-10-01 10:41 UTC
    Modified
    • source_updated_at
      2026-09-30T14:44:38-04:00->2026-10-01T02:43:48-04:00
  98. ~
    #1118274 2026-10-01 18:47 UTC
    Modified
    • source_updated_at
      2026-10-01T02:43:48-04:00->2026-10-01T14:43:57-04:00
  99. ~
    #1129683 2026-10-02 07:06 UTC
    Modified
    • source_updated_at
      2026-10-01T14:43:57-04:00->2026-10-02T02:43:39-04:00
  100. ~
    #1140581 2026-10-02 19:24 UTC
    Modified
    • source_updated_at
      2026-10-02T02:43:39-04:00->2026-10-02T14:44:46-04:00
  101. ~
    #1159836 2026-10-03 19:33 UTC
    Modified
    • source_updated_at
      2026-10-02T14:44:46-04:00->2026-10-03T14:42:45-04:00
  102. ~
    #1167603 2026-10-04 07:47 UTC
    Modified
    • source_updated_at
      2026-10-03T14:42:45-04:00->2026-10-04T02:43:02-04:00