Senior Security Engineer, Detection and Response

Roblox·Londonsenior

In short

→Ingeniero de seguridad senior que diseña detecciones y automatiza respuestas a incidentes a escala global.
→Lidera la respuesta a incidentes en Europa como comandante principal, operando con alta autonomía sin supervisión inmediata.
→Es un rol fundador en EMEA, clave para construir la arquitectura de detección y respuesta con enfoque en automatización y detecciones como código.

Fluent English required for collaboration with US HQ and global teams.

In ~1 minute you get: who interviews you, the likely questions answered from your CV, and your CV tailored to this job. Free, no card.

🎧Land the interview? Bring the copilot. Our free extension listens to the live interview and flashes 3-4-word anchors from your resume and prep — glance, connect, talk. Get the extension →

What they ask for

✓Experiencia comprobada en detección y respuesta de seguridad (SIEM, SOAR, EDR).
✓Capacidad para operar con alta autonomía en entornos de tiempo de zona diferente.
✓Habilidades avanzadas en análisis forense y caza de amenazas.
✓Experiencia en desarrollo de detecciones como código (detections-as-code).
✓Conocimiento profundo de integraciones de herramientas de caso y gestión de incidentes.
✓Capacidad para liderar respuestas a incidentes críticos sin escalado inmediato.

Don't tick every box? That's normal — your free dossier shows your gaps and how to cover them in the interview.

SIEMSOAREDRDetections-as-codeData pipelinesEnrichment pipelinesCase management integrationsAutomationFollow-the-sun hand-offsIncident command

Who should you write to at Roblox?

Your free dossier identifies the people who'd interview you — their background, what they value, and how to reach out so you stand out before applying.

Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences– all created by our global community of developers and creators. At Roblox, we’re building the tools and platform that empower our community to bring any experience that they can imagine to life. Our vision is to reimagine the way people come together, from anywhere in the world, and on any device. We’re on a mission to connect a billion people with optimism and civility, and looking for amazing talent to help us get there. A career at Roblox means you’ll be working to shape the future of human interaction, solving unique technical challenges at scale, and helping to create safer, more civil shared experiences for everyone. As a founding member of the Security Operations team in EMEA, you will join us at an exciting time in Roblox’s SIRT & SOC program. You will design and build the detections, automation and tooling that let a lean team monitor and protect players, developers, employees and the platform at global scale and serve as security incident commander in the region. This is a highly autonomous role where you will be a primary decision-maker, core to our mission to maintain a highly capable 24/7/365 monitoring and response capability. While you will work in close collaboration with peers at our US West Coast Headquarters, the time difference requires an engineer who can operate independently, making critical decisions without immediate oversight. We favor engineering our way out of toil through automation, orchestration, detections-as-code, and risk-based prioritization, while retaining the deep technical skills required to conduct detailed, hands-on analysis and lead response end-to-end when the situation warrants. Work Environment: This role is based in London, UK. You will be working from a dedicated, private space located within a shared office environment, designed to enable collaboration while remaining secure. You will: • Build Detection & Response Systems: Design, write, and maintain production-quality detections, automations and integrations (detections-as-code, SOAR playbooks, data and enrichment pipelines) that scale our monitoring capability and reduce manual toil. • Own Tooling & Platform: Develop and improve the tooling the global SIRT/SOC depends on alert quality and enrichment, case-management integrations and automation that powers reliable "follow-the-sun" hand-offs. • Exercise High Autonomy: Act as the primary Incident Commander for the European time zone, making critical, time-sensitive decisions independently before US HQ comes online. You will serve as the senior-most security engineering point of contact in the region. • Drive Strategy & Architecture: Shape the technical direction of the detection & response engineering function, specifically architecting how global hand-offs and "follow-the-sun" models can be optimized and automated. • Command Security Incidents: Ensure serious threats and impacts are understood, mitigated, and learned from with speed and professionalism, often leading responses end-to-end without immediate escalation paths during local hours — and turning what you learn into durable, automated detections. • Conduct Forensic Investigations & Threat Hunt: Dig into complex context to determine whether threats exist, take decisive action and proactively hunt for anomalous activity in our signals, distinguishing outliers from threats. • Lead High-Profile Resp

Looking for something similar?

Leave your email and we'll alert you when matching jobs appear.

Don't apply unprepared

We research who's interviewing you, tailor your CV and rehearse you live — first one free.