Senior Security Engineer - Detection and Response

This role will be seated in Menlo Park, CA, Seattle, WA, Washington, DC, or New York, NY.

About the team:

The Detection and Response Team (D&R) at Robinhood exemplifies our Safety First value by building and operating services that protect our customers' security and privacy. D&R consists of the Detection Platform and Incident Response teams, who work together to detect and assess threats, collect and analyze data, and respond to events. Together, we ensure the effectiveness of our safeguards and the continuous protection of our customer's data.

We are searching for an inquisitive and innovative Security Engineer with a passion for building detection strategies, conducting threat-hunting exercises, automating the mundane, and leading responses to security incidents against the full breadth of Robinhood's technology stack.

We want to talk to you if you're interested in being part of an impactful and inclusive team built on teamwork that encourages your diverse ideas and perspectives.

What you'll do day-to-day:

• Research attacker tactics, techniques, and procedures (TTPs) and craft detections to quickly identify and contain potential security threats
• Work with our Threat Intel and Offensive Security teams to stay ahead of emerging threats and understand where our risks and gaps exist
• Respond to security events, triage, perform investigations, incident analysis, and communicate clearly and efficiently to partners
• Participate in an on-call rotation responsible for incident command

About you:

• 5+ years of experience in security operations, threat detection, incident response, or related domains
• Innately curious and skilled at finding hidden signals in a sea of data
• Excellent communicator and are comfortable discussing complex technical concepts with engineers and partners at any level
• Strong analytical and problem-solving skills, with an ability to think critically and objectively assess security risks
• Deep expertise in security monitoring, log analysis, and detection building using diverse datasets

Bonus points:

• Experience detecting or responding to threats in Kubernetes (K8s), AWS, and Linux environments
• Proficiency in using Splunk or similar tools to build sophisticated detections
• Experience threat hunting to proactively and iteratively investigate potential risks to discover suspicious behavior
• Comfortable scripting in Python, Go, Bash, etc.

Technologies we use:

• Amazon Web Services (AWS), Kubernetes
• Splunk, Tines, Falco, Databricks, EDR, Osquery

The expected salary range for this role is based on the location where the work will be performed and is aligned to one of 3 compensation zones. This role is also eligible to participate in a Robinhood bonus plan and Robinhood's equity plan.

US Zone 1: $187000 - $220000
US Zone 2: $165000 - $194000
US Zone 3: $146000 - $172000