Security Engineer

Robinhood is building the future of finance. Our mission is to democratize finance for all. An estimated $124 trillion of assets will be inherited by younger generations in the next two decades.

• Serve as the Security Operations AI Tech Lead for Robinhood's offensive and defensive security functions — Owning the technical creation and execution of Robinhood’s Security Operations AI roadmap for defensive and offensive operations
• Lead offensive security research— applying deep red team, penetration testing, and application security expertise to proactively identify and close critical attack surfaces before adversaries find them
• Architect and build next-generation defensive capabilities that go beyond static detection — designing intelligent systems that actively engage, deceive, and track sophisticated threat actors including AI-powered attackers
• Drive Robinhood's AI-forward security strategy — not just using AI as a productivity tool, but as a core architectural component of how we build a synthetic workforce to scale against agentic and automated adversaries
• Identify emerging threat actor motivations and attack patterns especially in the AI space, translating intelligence into proactive defensive architectures that stay ahead of the threat curve
• Set technical standards and mentor security engineers within Security Operations, elevating the overall capability of the org

• 12+ years of security engineering experience with demonstrated depth across both offensive security (red team, penetration testing, application security, vulnerability management) and defensive security (incident response, detection engineering, threat intelligence)
• Demonstrate impact by innovating with AI in Security Operations — You’ve moved orgs well beyond the chatbot experience and implemented measurable success in uplifting Security Operations with AI
• Proven track record of technical leadership at the Senior Staff, Principal, or Distinguished level — you've set org-wide or company-wide security direction, not just executed within a team
• Deep expertise in application security — you understand how modern software is built and where it breaks, and you can operate equally well as a security engineer and a software engineer
• Strong background in threat detection and security operations — you understand how attackers operate and how to build systems that catch them faster
• A genuine, informed point of view on AI in the security domain — you're not using AI to write scripts, you're thinking about how AI fundamentally changes both the attack surface and the defensive toolkit
• Proficiency with cloud infrastructure security (AWS preferred), telemetry and observability tooling, and the technical underpinnings of large-scale detection pipelines
• Exceptional technical communication skills — you can write, brief, and influence at the executive level as well as go deep with engineers on implementation details
• Security certifications (OSCP, GREM, GXPN, or equivalent) are a plus — but demonstrated capability will always outweigh paper credentials here

This role is based in our Menlo Park, New York City, or Bellevue office, with in-person attendance expected at least 3 days per week.