Engineering Manager, Enterprise Security

Overview

Lead a team of security software engineers building and running the systems that protect Roblox's corporate infrastructure, including endpoint, network, and supply chain security. The role is hands-on and partners across the company to balance innovation with security risk management.

What you'll do

• Hire, coach, and develop a team of security software engineers, owning performance, career growth, and technical culture.
• Define and drive the Enterprise Security roadmap across the team's domains, balancing near-term risk reduction with durable platform investment.
• Set direction for safe deployment of AI at Roblox, including agent sandboxing, tool and MCP server access, scoped and short-lived credentials, and control over the data agents can reach.
• Use AI to accelerate security work, from triage and investigation to code and configuration review.
• Own supply chain risk across software, SaaS, and people, including packages and applications on endpoints, SaaS integrations with standing access to corporate data, and contractors and BPO with access to critical Roblox data and operations.
• Partner with Corporate Engineering, DevOps, IT, and product teams to build security controls into enterprise systems, developer workflows, and AI tooling.
• Report risk and progress clearly to senior leadership.

What you'll need

• 8+ years combining software engineering and security, including 2+ years managing engineers with a track record of hiring and growing strong technical teams.
• Current proficiency in at least one systems or backend language: Python, Go, or Rust.
• Strong background across two or more of endpoint security, network security, enterprise application security, and identity and access management.
• Working understanding of human and machine identity and authentication protocols (OAuth 2.0, OIDC, SAML 2.0, SCIM 2.0), and experience threat modeling systems built on them.
• Proficiency with security-relevant system design: session management, authorization, audit logging, rate limiting, secret storage.
• Understanding of Zero Trust architecture and least-privilege access patterns, including device trust and identity-aware network access.

Nice to have

• Policy-as-code or fine-grained authorization frameworks (OPA/Rego, Cedar, Zanzibar/ReBAC).
• FIDO2/WebAuthn and passkey deployments.
• Endpoint security controls (EDR, device management, OS hardening).
• Network segmentation patterns.
• Experience securing enterprise SaaS and internally built business applications and their API integrations.

Details

• Location: San Mateo, CA, hybrid schedule.
• Onsite Tuesday, Wednesday, and Thursday, with optional presence on Monday and Friday.
• Reports to the Senior Manager of Enterprise Security and IAM.
• Annual base salary range: $293,800 to $343,340 USD, plus equity and benefits.
• For US-based roles only: the Company may not be able to employ candidates who have United States work authorization related to certain U.S. visa categories, or support future H-1B sponsorship at this time.