Principal Enterprise Security Engineer

Overview

Principal Enterprise Security Engineer role within Roblox's Platform, Enterprise, and Application Security group, executing the Enterprise Security Strategy to protect corporate infrastructure and ensure secure, compliant operations.

What you'll do

• Evaluate and implement security technologies and vendor solutions aligned with enterprise security requirements, compliance standards, and overall risk management strategy.
• Lead and drive initiatives across core security domains, including Endpoint Security, SaaS Security, Identity & Access Management (IAM), Agentic AI Governance, and Supply Chain Security.
• Collaborate closely with IT, engineering, DevOps, and business stakeholders to integrate security tools, policies, and processes into enterprise systems and workflows, enabling secure-by-design implementations.
• Design and build automation scripts and tools to streamline security workflows, collect actionable metrics, and enforce security policies at scale.

What you'll need

• 6+ years of relevant professional experience.
• Familiarity with Identity and Access Management, Authentication & Authorization, Endpoint and Network Security controls, and Supply chain risk management.
• Strong understanding of security fundamentals including zero trust architecture, threat modeling, security frameworks (SOC 2, ISO 27001), and best practices in corporate security environments.
• Experience designing or operating workflows using low-code and no-code orchestration platforms.

Nice to have

• Expertise in Google Workspace, OSQuery, and Okta.

Details

• Location: San Mateo, CA (headquarters).
• Roles based in the office are onsite Tuesday, Wednesday, and Thursday, with optional presence on Monday and Friday (unless otherwise noted).
• Reports directly to the Senior Manager of Enterprise Security Engineering.
• Annual base salary range: $320,880 to $365,710 USD.
• Full-time employees are also eligible for equity compensation and benefits.
• For US-based roles only: the Company may not be able to employ candidates who have United States work authorization related to certain U.S. visa categories, or support future H-1B sponsorship at this time.