About the team + role

We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. 

The Security Engineering team focuses on protecting Robinhood’s identity infrastructure by building and maintaining systems that control how people and services access critical resources. The team owns authentication and authorization for both internal systems and customer-facing products, ensuring secure and reliable access at scale. Work includes access management, certificate lifecycle management, and improving visibility into system behavior. The team partners closely with infrastructure, product, and data engineering groups to integrate secure access patterns into all layers of the platform. You will help shape systems that protect financial data and maintain trust at scale!

As a Staff Software Engineer, you will lead the design and evolution of systems that manage identity, authentication, authorization, secure connections and encryption across Robinhood. You will guide technical direction for large-scale backend services, including a proprietary access management platform, and define secure patterns for emerging areas such as AI-driven workflows. You will also contribute to certificate lifecycle management and public key infrastructure systems. This role requires strong technical judgment, hands-on development, and mentorship of other engineers while ensuring systems meet strict reliability and latency expectations.

This role is based in our Bellevue, WA office, with in-person attendance expected at least 3 days per week.

At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams. 

What you’ll do

• Design and build systems that manage authentication and authorization for internal services and customer-facing applications
• Lead the technical direction of access management platforms, including scaling proprietary systems to support high traffic and low latency requirements
• Develop secure access patterns and monitoring systems for AI and machine learning workflows across engineering teams
• Build and maintain certificate lifecycle management and public key infrastructure systems with strong observability and automation
• Partner with engineering teams across infrastructure, product, and data to integrate secure access controls into new and existing systems

What you bring

• You have 8+ years of experience building backend or security systems, including work in identity and access management at scale
• You have experience with authentication protocols such as OAuth 2.0, OpenID Connect, SAML, or WebAuthn
• You have strong programming skills in Go, Python, or Rust and experience operating distributed systems in environments such as Kubernetes and AWS
• You have experience designing highly available systems with clear performance and reliability goals
• You are comfortable guiding technical decisions and supporting other engineers through code reviews and design discussions

What we offer

• Challenging, high-impact work to grow your career.
• Performance-driven compensation with multipliers for outsized impact, bonus programs, equity ownership, and 401(k) matching.
• Best-in-class benefits to fuel your work, including 100% paid health insurance for employees with 90% coverage for dependents.
• Lifestyle wallet — a highly flexible benefits spending account for wellness, learning, and more.
• Employer-paid life & disability insurance, fertility benefits, and mental health benefits.
• Time off to recharge including company holidays, paid time off, sick time, parental leave, and more!
• Exceptional office experience with catered meals, events, and comfortable workspaces.

About the team + role

We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards.

The Cloud Security team is focused on protecting Robinhood’s AWS cloud and providing engineers with foundational security capabilities. It is a major contributor to the company’s least privilege objective to manage network traffic and reduce the level of access that employees have or could obtain through escalation.

A Senior Security Engineer on the Cloud Security team is a well-rounded technologist and a deep subject matter expert in cloud security and building security controls on Amazon Web Services (AWS). The ideal candidate for this role will embody and exemplify our Safety First value.

This role is based in our Bellevue, WA offices, with in-person attendance expected at least 3 days per week.

At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams.

What you’ll do

• As a Senior Security Engineer you will be part of a team which owns the security posture for cloud infrastructure on which all Robinhood products are built
• You will build and operate solutions that protect foundational infrastructure and make it easier for Robinhood developers to protect their applications
• Protect Robinhood’s AWS cloud environment and provide engineers with foundational security capabilities
• Build, configure and set up systems with a safety first approach

What you bring

• Securing enterprise applications on AWS by building software, services, and automation that provide safe defaults, paved roads, and intuitive capabilities to other developers
• Proficiency with Golang (preferred) or Python and Infrastructure-as-Code (IaC) using Terraform
• Strong command of industry best practices like the AWS Well-Architected framework and CIS Benchmarks and have expert level knowledge of AWS security services like Identity & Access Management (IAM), Service Control Policies (SCPs), AWS WAF, and AWS Network Firewall

What we offer

• Challenging, high-impact work to grow your career
• Performance driven compensation with multipliers for outsized impact, bonus programs, equity ownership, and 401(k) matching
• Best in class benefits to fuel your work, including 100% paid health insurance for employees with 90% coverage for dependents
• Lifestyle wallet - a highly flexible benefits spending account for wellness, learning, and more
• Employer-paid life & disability insurance, fertility benefits, and mental health benefits
• Time off to recharge including company holidays, paid time off, sick time, parental leave, and more!
• Exceptional office experience with catered meals, events, and comfortable workspaces.

About the team + role

We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. 

The Security Platform team is responsible for the secure lifecycle, governance, and protection of Robinhood’s most sensitive user data. This team builds foundational systems such as secure data pipelines, tokenization services, and privacy compliance infrastructure to ensure customer data is handled responsibly and in line with regulations. The team works closely with security, infrastructure, and product engineering partners to ensure data is both usable and protected. You will contribute to systems that support authentication, third-party integrations, and emerging AI-driven use cases.

As a Senior Software Engineer, you will design and build backend systems that securely process and manage customer data across Robinhood’s platform. You will own the systems that handle authentication, authorization, and privacy-preserving data operations. This role involves close collaboration with engineers focused on access management, infrastructure, and data systems. Your work will directly support efforts to improve system reliability, strengthen data protections, and enable new product capabilities using secure data.

This role is based in our Bellevue, WA office, with in-person attendance expected at least 3 days per week.

At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams. 

What you’ll do

• Build backend services and data pipelines that securely store, process, and route customer data
• Develop systems for token issuance, user authentication, and anonymization to support privacy requirements
• Define and execute the vision for authentication across next-generation AI platforms, intelligent agents, and MCP ecosystems, shaping how secure identity works in an AI-first world
• Implement data retention and deletion workflows aligned with regulatory standards such as CCPA and GDPR
• Partner with access management engineers to enforce least-privilege access controls across systems
• Contribute to monitoring and auditing systems that track how data is accessed and used

What you bring

• You have 5+ years of software engineering experience focused on backend systems, data infrastructure, or security
• You are proficient in at least one backend language such as Python, Go, or Java
• You have experience building and operating services in cloud environments such as AWS and Kubernetes
• You have worked with distributed systems such as databases, messaging systems, or data processing frameworks (e.g., PostgreSQL, Kafka, Spark, Snowflake)
• You understand data protection principles such as encryption, secure data handling, and privacy-focused system design

What we offer

• Challenging, high-impact work to grow your career.
• Performance-driven compensation with multipliers for outsized impact, bonus programs, equity ownership, and 401(k) matching.
• Best-in-class benefits to fuel your work, including 100% paid health insurance for employees with 90% coverage for dependents.
• Lifestyle wallet — a highly flexible benefits spending account for wellness, learning, and more.
• Employer-paid life & disability insurance, fertility benefits, and mental health benefits.
• Time off to recharge including company holidays, paid time off, sick time, parental leave, and more!
• Exceptional office experience with catered meals, events, and comfortable workspaces.

About the team + role

We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards.

The AI Platform team builds the secure foundation that enables responsible, high-quality AI across Robinhood. Our mission is to provide the infrastructure, governance controls, and reusable services that allow teams to develop AI-powered products while meeting strict security, privacy, and regulatory requirements. We partner closely with Security, Privacy, Risk, Compliance, Engineering, and Data Science to ensure AI systems are resilient, explainable, and production-ready. Our work is central to protecting customer data and maintaining trust as we expand AI capabilities across the company!

As a Senior Security AI Product Manager, you will define and execute the strategy for secure AI development at scale. You will shape the roadmap for capabilities such as model governance, secure model deployment, adversarial testing, AI risk controls, and monitoring frameworks. You will work with internal product teams to help them adopt AI safely, accelerate experimentation within guardrails, and operationalize controls for fraud detection, abuse prevention, identity protection, and sensitive data handling. Your work will directly influence how AI is built, reviewed, launched, and continuously monitored across Robinhood.

This role is based in our Bellevue, WA office, with in-person attendance expected at least 3 days per week.

At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams.

What you’ll do 

• Set the strategy and roadmap for secure AI platform capabilities, including model governance, access controls, secure data pipelines, and production monitoring.
• Define requirements for AI security standards such as model risk assessments, red-teaming, adversarial testing, explainability reviews, and audit logging.
• Partner with Security, Privacy, Risk, and Compliance to translate regulatory expectations into clear product requirements and reusable platform controls.
• Establish measurable health metrics for AI systems, including model performance, drift detection, abuse signals, and incident response readiness.
• Guide internal teams through secure AI adoption by providing structured intake processes, risk reviews, and launch readiness criteria.

What you bring:

• Experience:
• Minimum 4 years in building and launching high-quality consumer products.
• Proven experience in defining and developing AI-powered products.
• Bonus points for experience in fintech and/or consumer AI products.
• Technical Knowledge:
• Familiarity with experimentation platforms and A/B testing for ML systems.
• Understanding of fine-tuning, evaluations, and ML optimization techniques.
• Exposure to LLMs, recommender systems, NLP, or reinforcement learning.
• Experience with products leveraging Agentic AI is a plus.
• Skills:
• Strong leadership, communication, and relationship management abilities.
• Adept at translating complex technical details into easily understandable language for a wider audience.
• Decision Making:
• Experience utilizing research, experimentation, and product analytics to drive informed decisions.

What we offer

• Challenging, high-impact work to grow your career.
• Performance-driven compensation with multipliers for outsized impact, bonus programs, equity ownership, and 401(k) matching.
• Best-in-class benefits to fuel your work, including 100% paid health insurance for employees with 90% coverage for dependents.
• Lifestyle wallet — a highly flexible benefits spending account for wellness, learning, and more.
• Employer-paid life & disability insurance, fertility benefits, and mental health benefits.
• Time off to recharge including company holidays, paid time off, sick time, parental leave, and more!
• Exceptional office experience with catered meals, events, and comfortable workspaces.

About the team + role

We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards.

The Product and Application Security team builds and operates systems that help engineers identify and resolve security risks earlier in the software development lifecycle. The team focuses on creating practical safeguards—such as libraries and frameworks—that make secure development the default. You’ll work closely with engineering teams to reduce risk at scale while supporting efficient product development.

As a Staff Security Engineer, you will serve as a technical leader and subject matter expert, guiding how security is embedded into development practices across Robinhood. You will design and implement systems that provide clear security patterns for engineers, consult on architecture and threat models, and help shape long-term security strategy. This is a high-impact role with the opportunity to define how application security evolves across the company!

This role is based in our Menlo Park, CA office, with in-person attendance expected at least 3 days per week.

At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams.

What you’ll do

• Design and build systems that help engineers identify and address security risks earlier in the development lifecycle
• Partner with product and engineering teams to review system designs, conduct threat modeling, and guide secure implementation
• Develop and maintain security guardrails, including shared libraries, frameworks, and automated checks used in production systems
• Lead initiatives such as AI security governance and automated secure design reviews
• Influence security practices across teams by providing guidance, setting standards, and improving adoption of secure development patterns

What you bring

• You have 8+ years of experience in application security, product security, or a related field
• You have strong experience identifying and addressing security risks earlier in the software development lifecycle
• You have experience building production-grade systems in Python or Go that other teams rely on
• You are comfortable leading technical initiatives across teams without direct authority
• You have experience working in environments that prioritize reliability and structured incident response practices

What we offer

• Challenging, high-impact work to grow your career
• Performance driven compensation with multipliers for outsized impact, bonus programs, equity ownership, and 401(k) matching
• Best in class benefits to fuel your work, including 100% paid health insurance for employees with 90% coverage for dependents
• Lifestyle wallet - a highly flexible benefits spending account for wellness, learning, and more
• Employer-paid life & disability insurance, fertility benefits, and mental health benefits
• Time off to recharge including company holidays, paid time off, sick time, parental leave, and more!
• Exceptional office experience with catered meals, events, and comfortable workspaces.

About the team + role

We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. 

The Vulnerability Management team’s mission is to reimagine security as an engineering and design challenge by building scalable, automated defense systems that proactively identify and reduce risk. The team is driving a shift toward an intelligence-driven defense model, leveraging advanced technologies like AI and machine learning to move beyond traditional “scan-and-patch” approaches and make security seamless for developers.

As a Senior Vulnerability Management Engineer, you will lead the transformation of vulnerability management into a self-scaling security platform. You’ll architect next-generation automated defense systems, using Agentic AI and machine learning to continuously discover, prioritize, and remediate risk at scale—helping make security efficient, proactive, and embedded into the development lifecycle.

This role is based in our Toronto, Canada office(s), with in-person attendance expected at least 3 days per week. 

At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams.

What you’ll do

• Set Strategic RBVM Vision: Act as the technical lighthouse, defining the multi-year roadmap and driving the move toward Risk-Based Vulnerability Management (RBVM), prioritizing vulnerabilities based on real-world exploitability and business context.
• Architect Agentic AI Systems: Design and deploy AI agents that autonomously triage findings, correlate threat intelligence, and generate production-ready remediations (e.g., automated Pull Requests for dependency updates and config drift).
• Build Exposure Intelligence: Develop systems that correlate vulnerabilities with runtime context and infrastructure topology (Kubernetes/AWS) to accurately model real-world blast radius and ensure engineers only fix what is actually exploitable.
• Automate Triage & Self-Healing: Create "paved roads" and CI/CD guardrails that prevent specific vulnerability categories from ever reaching production, reducing manual toil for the entire engineering organization.
• Data-Centric Visibility: Build high-fidelity dashboards using LLM-powered summarization to translate complex security signals into actionable insights for engineering leadership.
• Lead Emergency Response: Orchestrate the technical response to high-impact zero-days by rapidly performing cross-environment blast-radius analysis.
• Drive Execution Ownership: Take full ownership of operational security work, ensuring that critical vulnerabilities are systematically eradicated while maintaining high engineering velocity.

What you bring

• Experience: 5+ years in Security Engineering with a track record of leading high-impact automation or security platform initiatives at a Senior or Staff level.
• AI & Agentic System Fluency: Hands-on experience building or deploying agentic systems or LLM orchestration frameworks (e.g., LangChain, AutoGPT) to solve complex security or engineering problems at scale.
• Bug Bounty & Exploit Proficiency: Active experience participating in or managing Bug Bounty programs; a deep understanding of how attackers exploit vulnerabilities and how to translate those findings into systemic fixes.
• Engineering Excellence: Strong software engineering background with proficiency in Go or Python and a history of building scalable, API-driven security tooling.
• Modern Infrastructure Depth: Deep knowledge of securing AWS and Kubernetes-based architectures.
• Vulnerability Domain Knowledge: High familiarity with vulnerability categories, exploitability, and modern risk frameworks (CVSS, EPSS, CISA KEV).
• Detection Ecosystems: Experience with modern platforms like Snyk, Semgrep, Wiz, EndorLabs, or TruffleHog.
• Velocity Mindset: A commitment to reducing security friction and a track record of working effectively with high-velocity engineering teams.

Nice to have

• Fintech Experience: Experience navigating security in highly regulated or high-growth financial environments.
• Security as Code: Experience implementing "Security as Code" within large-scale CI/CD environments.

What we offer

• Challenging, high-impact work to grow your career
• Performance driven compensation with multipliers for outsized impact, bonus programs, and equity ownership
• Top tier benefits to fuel your work, including supplemental health insurance, ancillary insurance, and mental health support programs
• Lifestyle wallet - a highly flexible employer-paid benefits spending account expenses beyond traditional benefits such as wellness, childcare, learning, and more.
• Time off to recharge including company holidays, paid time off, sick time, paid volunteer time off, parental leave, and more!
• Exceptional office experience with catered meals, events, and comfortable workspaces. 
• Monthly commuter stipend to help offset in-office commuting costs

Our team is committed to providing an inclusive and welcoming interview experience for all candidates. If you require a specific accommodation during the application or interview process due to a physical or mental condition, please complete this Applicant Accommodation Form to notify our team. The form should only be completed if you need a specific accommodation.

AI Usage Disclosure: Robinhood uses artificial intelligence (AI) tools to support parts of our recruiting process. These tools enhance the efficiency and consistency of our hiring process; however, all hiring decisions are made by our hiring teams.

Vacancy Notice: This job posting represents an existing vacancy that we are actively seeking to fill.

About the team + role

We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. 

At Robinhood, we view security as an engineering and design challenge, not an administrative one. We are looking for a lead architect for our next-generation automated defense systems. As a Senior Vulnerability Management Engineer, you will transform the program into a self-scaling security platform that transcends traditional "scan-and-patch" cycles. You will lead the shift to an Intelligence-Driven Defense model by leveraging Agentic AI and Machine Learning to automate the discovery, prioritization, and remediation of risk at scale, ultimately making security "cheap" for our developers.

This role is based in our Menlo Park, CA office, with in-person attendance expected at least 3 days per week.

At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams. 

What you’ll do

• Set Strategic RBVM Vision: Act as the technical lighthouse, defining the multi-year roadmap and driving the move toward Risk-Based Vulnerability Management (RBVM), prioritizing vulnerabilities based on real-world exploitability and business context.
• Architect Agentic AI Systems: Design and deploy AI agents that autonomously triage findings, correlate threat intelligence, and generate production-ready remediations (e.g., automated Pull Requests for dependency updates and config drift).
• Build Exposure Intelligence: Develop systems that correlate vulnerabilities with runtime context and infrastructure topology (Kubernetes/AWS) to accurately model real-world blast radius and ensure engineers only fix what is actually exploitable.
• Automate Triage & Self-Healing: Create "paved roads" and CI/CD guardrails that prevent specific vulnerability categories from ever reaching production, reducing manual toil for the entire engineering organization.
• Data-Centric Visibility: Build high-fidelity dashboards using LLM-powered summarization to translate complex security signals into actionable insights for engineering leadership.
• Lead Emergency Response: Orchestrate the technical response to high-impact zero-days by rapidly performing cross-environment blast-radius analysis.
• Drive Execution Ownership: Take full ownership of operational security work, ensuring that critical vulnerabilities are systematically eradicated while maintaining high engineering velocity.

What you bring

• Experience: 5+ years in Security Engineering with a track record of leading high-impact automation or security platform initiatives at a Senior or Staff level.
• AI & Agentic System Fluency: Hands-on experience building or deploying agentic systems or LLM orchestration frameworks (e.g., LangChain, AutoGPT) to solve complex security or engineering problems at scale.
• Bug Bounty & Exploit Proficiency: Active experience participating in or managing Bug Bounty programs; a deep understanding of how attackers exploit vulnerabilities and how to translate those findings into systemic fixes.
• Engineering Excellence: Strong software engineering background with proficiency in Go or Python and a history of building scalable, API-driven security tooling.
• Modern Infrastructure Depth: Deep knowledge of securing AWS and Kubernetes-based architectures.
• Vulnerability Domain Knowledge: High familiarity with vulnerability categories, exploitability, and modern risk frameworks (CVSS, EPSS, CISA KEV).
• Detection Ecosystems: Experience with modern platforms like Snyk, Semgrep, Wiz, EndorLabs, or TruffleHog.
• Velocity Mindset: A commitment to reducing security friction and a track record of working effectively with high-velocity engineering teams.

Nice to have

• Fintech Experience: Experience navigating security in highly regulated or high-growth financial environments.
• Security as Code: Experience implementing "Security as Code" within large-scale CI/CD environments.

What we offer

• Challenging, high-impact work to grow your career.
• Performance-driven compensation with multipliers for outsized impact, bonus programs, equity ownership, and 401(k) matching.
• Best-in-class benefits to fuel your work, including 100% paid health insurance for employees with 90% coverage for dependents.
• Lifestyle wallet — a highly flexible benefits spending account for wellness, learning, and more.
• Employer-paid life & disability insurance, fertility benefits, and mental health benefits.
• Time off to recharge including company holidays, paid time off, sick time, parental leave, and more!
• Exceptional office experience with catered meals, events, and comfortable workspaces.

About the team + role

We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. 

The Security Operations (SecOps) team works to safeguard Robinhood and its customers by identifying, investigating, and responding to security threats. The team monitors production systems, endpoints, and cloud environments, and uses threat intelligence and structured testing to uncover risks before they affect customers. SecOps partners closely with engineering and infrastructure teams to strengthen detection coverage and response readiness. The team’s focus is clear: reduce risk, improve visibility, and protect customer trust every day!

As a Security Engineer, Detection & Response, you will strengthen Robinhood’s ability to detect, investigate, and contain security incidents. You will design and improve detection logic, analyze security telemetry across cloud and endpoint systems, and contribute to measurable reductions in false positives and detection gaps. You will work directly with SOC analysts and security engineers to refine investigation workflows and document incident findings. This role is ideal for someone who enjoys hands-on detection engineering and improving how teams respond to real-world threats!

This role is based in our Menlo Park, CA office, with in-person attendance expected at least 3 days per week.

At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams.

What you’ll do

• Investigate security alerts across SIEM, EDR, and cloud security platforms, perform log analysis, and coordinate containment or remediation steps with engineering partners
• Develop, test, and tune detection rules using query languages to improve signal quality and reduce false positives
• Correlate data from multiple telemetry sources to identify attack patterns and determine appropriate response actions
• Monitor emerging threats and update detection logic based on investigation findings and threat intelligence reporting
• Contribute to automation efforts by building or refining SOAR playbooks and scripts that improve investigation speed and consistency
• Document incidents and contribute to post-incident reviews with clear findings and recommended improvements to detection and response processes

What you bring

• 2–4 years of experience in security operations, detection engineering, or incident response
• Experience analyzing logs and tuning alerts within SIEMs, EDR platforms, and cloud security tools
• Experience writing detections using query languages (e.g., SQL-like, KQL, or similar)
• Familiarity with threat hunting and investigation techniques across cloud and endpoint environments
• Ability to analyze security telemetry, identify patterns of malicious activity, and recommend practical improvements
• Clear written and verbal communication skills when documenting incidents and collaborating with technical teams

Nice to have:

Our ambitious roadmap requires a great culture shaped by exceptional leaders. Here’s what we expect from them:

• Experience developing and deploying SOAR playbooks to automate detection and response workflows
• Familiarity with AWS, Okta, Kubernetes, and/or Google Workspace security monitoring tools
• Experience writing software to support detection and response tooling with a focus on secure, maintainable code
• Experience in building Agentic workflows, optimizing workflows with Generative AI

What we offer

• Challenging, high-impact work to grow your career.
• Performance-driven compensation with multipliers for outsized impact, bonus programs, equity ownership, and 401(k) matching.
• Best-in-class benefits to fuel your work, including 100% paid health insurance for employees with 90% coverage for dependents.
• Lifestyle wallet — a highly flexible benefits spending account for wellness, learning, and more.
• Employer-paid life & disability insurance, fertility benefits, and mental health benefits.
• Time off to recharge including company holidays, paid time off, sick time, parental leave, and more!
• Exceptional office experience with catered meals, events, and comfortable workspaces.

About the team + role

We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. 

The Security Operations (SecOps) team works to safeguard Robinhood and its customers by identifying, investigating, and responding to security threats. The team monitors production systems, endpoints, and cloud environments, and uses threat intelligence and structured testing to uncover risks before they affect customers. SecOps partners closely with engineering and infrastructure teams to strengthen detection coverage and response readiness. The team’s focus is clear: reduce risk, improve visibility, and protect customer trust every day!

As a Security Engineer, Detection & Response, you will strengthen Robinhood’s ability to detect, investigate, and contain security incidents. You will design and improve detection logic, analyze security telemetry across cloud and endpoint systems, and contribute to measurable reductions in false positives and detection gaps. You will work directly with SOC analysts and security engineers to refine investigation workflows and document incident findings. This role is ideal for someone who enjoys hands-on detection engineering and improving how teams respond to real-world threats!

This role is based in our Toronto, Canada office(s), with in-person attendance expected at least 3 days per week. 

At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams.

What you’ll do

• Investigate security alerts across SIEM, EDR, and cloud security platforms, perform log analysis, and coordinate containment or remediation steps with engineering partners
• Develop, test, and tune detection rules using query languages to improve signal quality and reduce false positives
• Correlate data from multiple telemetry sources to identify attack patterns and determine appropriate response actions
• Monitor emerging threats and update detection logic based on investigation findings and threat intelligence reporting
• Contribute to automation efforts by building or refining SOAR playbooks and scripts that improve investigation speed and consistency
• Document incidents and contribute to post-incident reviews with clear findings and recommended improvements to detection and response processes

What you bring

• 2–4 years of experience in security operations, detection engineering, or incident response
• Experience analyzing logs and tuning alerts within SIEMs, EDR platforms, and cloud security tools
• Experience writing detections using query languages (e.g., SQL-like, KQL, or similar)
• Familiarity with threat hunting and investigation techniques across cloud and endpoint environments
• Ability to analyze security telemetry, identify patterns of malicious activity, and recommend practical improvements
• Clear written and verbal communication skills when documenting incidents and collaborating with technical teams

Nice to have:

Our ambitious roadmap requires a great culture shaped by exceptional leaders. Here’s what we expect from them:

• Experience developing and deploying SOAR playbooks to automate detection and response workflows
• Familiarity with AWS, Okta, Kubernetes, and/or Google Workspace security monitoring tools
• Experience writing software to support detection and response tooling with a focus on secure, maintainable code
• Experience in building Agentic workflows, optimizing workflows with Generative AI

What we offer

• Challenging, high-impact work to grow your career
• Performance driven compensation with multipliers for outsized impact, bonus programs, and equity ownership
• Top tier benefits to fuel your work, including supplemental health insurance, ancillary insurance, and mental health support programs
• Lifestyle wallet - a highly flexible employer-paid benefits spending account expenses beyond traditional benefits such as wellness, childcare, learning, and more.
• Time off to recharge including company holidays, paid time off, sick time, paid volunteer time off, parental leave, and more!
• Exceptional office experience with catered meals, events, and comfortable workspaces. 
• Monthly commuter stipend to help offset in-office commuting costs

Our team is committed to providing an inclusive and welcoming interview experience for all candidates. If you require a specific accommodation during the application or interview process due to a physical or mental condition, please complete this Applicant Accommodation Form to notify our team. The form should only be completed if you need a specific accommodation.

AI Usage Disclosure: Robinhood uses artificial intelligence (AI) tools to support parts of our recruiting process. These tools enhance the efficiency and consistency of our hiring process; however, all hiring decisions are made by our hiring teams.

Vacancy Notice: This job posting represents an existing vacancy that we are actively seeking to fill.

About the team + role

We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards.

The Security and Technology Risk team’s mission is to protect Robinhood’s platforms, customer data, and financial systems while meeting regulatory expectations in every market we operate. In Singapore, this team plays a critical role in maintaining compliance with Monetary Authority of Singapore (MAS) requirements while ensuring systems remain secure, resilient, and reliable. The team partners closely with global Security, Privacy, Engineering, Legal, Risk, and Compliance teams to align local regulatory needs with global frameworks. You will help shape how security and technology risk are managed in a regulated brokerage environment!

As the APAC Security GRC Lead, you will lead the information security, cyber resilience, and technology risk management program for Robinhood Singapore. You will design and maintain a security and technology risk framework aligned with MAS Technology Risk Management Guidelines and broader regulatory expectations. As a key member of our global security office, you will work closely with enterprise teams to integrate local regulatory requirements into enterprise-wide controls, while serving as the primary contact for regulatory engagement in Singapore. This role directly influences the security, availability, and integrity of brokerage platforms, client data, and trading infrastructure.

This role is based in our Singapore office, with in-person attendance expected at least 3 days per week.

At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams.

What you’ll do

• You own and maintain the security and technology risk framework across infrastructure, applications, cloud, trading systems, and third-party services
• You advise management and risk committees using clear reporting on risk indicators, incidents, vulnerabilities, and remediation progress
• You lead compliance with MAS technology risk requirements by translating regulations into controls, monitoring, testing, and audit-ready evidence
• You oversee related cyber incident response processes, including detection, containment, recovery, and post-incident analysis
• You evaluate third-party and outsourcing risk, including vendor controls, contractual obligations, and ongoing risk monitoring
• Support after hours emergency incidents as needed.

What you bring

• You have 8+ years of experience in information security, cyber risk, or technology risk within financial services
• You have experience working in a MAS-regulated financial institution such as a brokerage, bank, payments firm, or wealth platform
• You understand MAS Technology Risk Management Guidelines and can apply them to real-world systems and controls
• You have experience supporting regulatory reviews, inspections, or formal requests from supervisory authorities
• You communicate clearly and collaborate effectively with teams across different regions and time zones

What we offer

• Challenging, high-impact work to grow your career
• Performance driven compensation with multipliers for outsized impact, bonus programs, and equity ownership
• Top tier benefits to fuel your work, including supplemental health insurance, ancillary insurance, and mental health support programs
• Lifestyle wallet - a highly flexible employer-paid benefits spending account expenses beyond traditional benefits such as wellness, childcare, learning, and more.
• Time off to recharge including company holidays, paid time off, sick time, paid volunteer time off, parental leave, and more!
• Exceptional office experience with catered meals, events, and comfortable workspaces.
• Monthly commuter stipend to help offset in-office commuting costs

About the team + role

We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. 

The Threat Intelligence team reduces organizational risk by rapidly detecting, understanding, and disrupting adversary activity. We research criminal ecosystems targeting our brand, customers, and infrastructure, and work with partners to translate that intelligence into detections, controls, and customer protections. Our work enables Security, Engineering, Trust & Safety, and executive leaders to focus resources where risk is highest. We operate with a strong sense of ownership, clear communication, and a commitment to protecting customers so they can confidently participate in the financial system!

As a Staff Security Analyst, Threat Intelligence, you will operate at the forefront of advanced and evolving threats targeting Robinhood and our customers. You will actively hunt for emerging phishing, scam, impersonation, fraud, and infrastructure abuse campaigns while building scalable systems that turn intelligence into action. This role combines hands-on investigation, program design, mentorship, and stakeholder engagement. Your work will shape proactive controls, influence product and security decisions, and strengthen our overall threat defense strategy.

This role is based in our Toronto, Canada office(s), with in-person attendance expected at least 3 days per week. 

At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams.

What you’ll do

• Proactively hunt and map criminal ecosystems targeting Robinhood and its customers, then translate intelligence into scalable systems and coordinated defenses that disrupt adversaries before they cause harm.
• Build and operationalize a comprehensive “Universe of Threats” by identifying, tracking, and prioritizing adversaries across phishing, scams, impersonation, fraud, and infrastructure abuse.
• Establish and mature a proactive threat intelligence lifecycle by developing industry partnerships, collaborating with trusted peers and federal authorities, and cultivating online personas to generate early warning capabilities that protect Robinhood’s business operations.
• Investigate attacker infrastructure across domains, DNS, certificate transparency logs, cloud providers, and telecom platforms, and convert findings into concrete detections, controls, and customer protections.
• Coordinate threat actor infrastructure takedowns with hosting providers, domain registrars, cloud platforms, and other infrastructure partners to disrupt adversary operations at scale.
• Design and automate intelligence workflows using OSINT tooling, enrichment pipelines, data analysis tools, and case management systems to scale analysis and reporting.
• Partner directly with Detection & Response, Automation, Customer Trust & Safety (Fraud and Financial Crimes), Security Engineering, Corporate Security, Risk, and executive leaders to prioritize threats based on measurable business risk.

What you bring

• 8–12+ years of total experience, including 3–5+ years operating at a senior or staff-level scope in threat intelligence, brand protection, or cyber investigations.
• Hands-on experience tracking criminal ecosystems tied to phishing, scams, impersonation, fraud, and infrastructure abuse, and the ability to move from isolated indicators to campaign- and actor-level analysis.
• Deep familiarity with domain registration patterns, DNS and certificate transparency analysis, cloud and hosting abuse across providers (e.g., AWS, GCP, Azure, VPS), and attacker monetization methods.
• Experience using OSINT tooling, SQL, Python, notebooks, SIEM or SOAR platforms, OpenCTI, and case management systems to analyze data and automate workflows.
• Ability to translate complex technical threats into clear business risk for technical teams and executive audiences through strong written and verbal communication.
• Experience mentoring others or leading initiatives across teams, with a high level of accountability and sound risk judgment in ambiguous situations.

Nice to have

• Experience with crypto investigations or on-chain analysis.
• Background in highly regulated industries such as fintech, financial services, payments, crypto, healthcare, or government.

About the team + role

We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. 

The Red Team team’s mission is to proactively identify and simulate real-world threats against Robinhood’s platforms, properties, and people. Through red teaming and adversarial simulations, the team evaluates security controls, uncovers vulnerabilities, and helps continuously strengthen Robinhood’s overall security posture in close partnership with Detection & Response, Physical Security, and Engineering.

As a Staff Offensive Security Engineer, you will take a hands-on role in designing and executing stealthy adversarial simulations to validate assumptions and uncover gaps in detection and response. You’ll leverage threat modeling, penetration testing, and research-driven techniques to emulate sophisticated attackers, while collaborating cross-functionally to improve defenses and shape more secure systems.

This role is based in our Toronto, Canada office(s), with in-person attendance expected at least 3 days per week. 

At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams.

What you’ll do

• Plan and execute red team operations, adversarial simulations, and penetration tests across applications, infrastructure, networks, offices, and internal processes.
• Perform threat modeling for new and existing services, clearly articulating security risks and tradeoffs to engineering and risk stakeholders.
• Conduct vulnerability research, exploit development, and testing using both custom tooling and public proof-of-concept techniques.
• Partner with detection and response teams to simulate realistic attack scenarios and evaluate monitoring and incident response readiness.
• Write and maintain tooling to automate and scale offensive security assessments.
• Serve as a subject matter expert by documenting findings, recommending remediation strategies, and supporting teams through fixes.
• Mentor teammates and contribute to shared knowledge through internal documentation, presentations, and external talks or blog posts.

What you bring

• 8+ years of hands-on experience in red teaming, offensive security, or penetration testing.
• Demonstrated experience mentoring or guiding other security engineers.
• Strong understanding of threat modeling methodologies and the MITRE ATT&CK framework.
• Experience testing modern environments, including cloud platforms (AWS, GCP), containerized systems (Docker, Kubernetes), CI pipelines, and identity systems.
• Working knowledge of defensive security tools such as IDS/IPS, EDR, packet capture, and network monitoring, including common evasion techniques.
• Proficiency in Python, Go, or JavaScript for exploit development, tooling, or automation.
• Clear written and verbal communication skills, with the ability to explain technical findings to both engineers and senior leaders.
• Experience collaborating with distributed teams and documenting work through tools such as Slack, Jira, GitHub, and email.

Bonus points:

• Experience working in financial technology or regulated environments.
• Prior experience serving as a technical lead on security initiatives.

What we offer

• Challenging, high-impact work to grow your career
• Performance driven compensation with multipliers for outsized impact, bonus programs, and equity ownership
• Top tier benefits to fuel your work, including supplemental health insurance, ancillary insurance, and mental health support programs
• Lifestyle wallet - a highly flexible employer-paid benefits spending account expenses beyond traditional benefits such as wellness, childcare, learning, and more.
• Time off to recharge including company holidays, paid time off, sick time, paid volunteer time off, parental leave, and more!
• Exceptional office experience with catered meals, events, and comfortable workspaces. 
• Monthly commuter stipend to help offset in-office commuting costs

Our team is committed to providing an inclusive and welcoming interview experience for all candidates. If you require a specific accommodation during the application or interview process due to a physical or mental condition, please complete this Applicant Accommodation Form to notify our team. The form should only be completed if you need a specific accommodation.

AI Usage Disclosure: Robinhood uses artificial intelligence (AI) tools to support parts of our recruiting process. These tools enhance the efficiency and consistency of our hiring process; however, all hiring decisions are made by our hiring teams.

Vacancy Notice: This job posting represents an existing vacancy that we are actively seeking to fill.

About the team + role

We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. 

The Threat Intelligence team reduces organizational risk by rapidly detecting, understanding, and disrupting adversary activity. We research criminal ecosystems targeting our brand, customers, and infrastructure, and work with partners to translate that intelligence into detections, controls, and customer protections. Our work enables Security, Engineering, Trust & Safety, and executive leaders to focus resources where risk is highest. We operate with a strong sense of ownership, clear communication, and a commitment to protecting customers so they can confidently participate in the financial system!

As a Staff Security Analyst, Threat Intelligence, you will operate at the forefront of advanced and evolving threats targeting Robinhood and our customers. You will actively hunt for emerging phishing, scam, impersonation, fraud, and infrastructure abuse campaigns while building scalable systems that turn intelligence into action. This role combines hands-on investigation, program design, mentorship, and stakeholder engagement. Your work will shape proactive controls, influence product and security decisions, and strengthen our overall threat defense strategy.

This role is based in our Menlo Park, CA office, with in-person attendance expected at least 3 days per week.

At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams.

What you’ll do

• Proactively hunt and map criminal ecosystems targeting Robinhood and its customers, then translate intelligence into scalable systems and coordinated defenses that disrupt adversaries before they cause harm.
• Build and operationalize a comprehensive “Universe of Threats” by identifying, tracking, and prioritizing adversaries across phishing, scams, impersonation, fraud, and infrastructure abuse.
• Establish and mature a proactive threat intelligence lifecycle by developing industry partnerships, collaborating with trusted peers and federal authorities, and cultivating online personas to generate early warning capabilities that protect Robinhood’s business operations.
• Investigate attacker infrastructure across domains, DNS, certificate transparency logs, cloud providers, and telecom platforms, and convert findings into concrete detections, controls, and customer protections.
• Coordinate threat actor infrastructure takedowns with hosting providers, domain registrars, cloud platforms, and other infrastructure partners to disrupt adversary operations at scale.
• Design and automate intelligence workflows using OSINT tooling, enrichment pipelines, data analysis tools, and case management systems to scale analysis and reporting.
• Partner directly with Detection & Response, Automation, Customer Trust & Safety (Fraud and Financial Crimes), Security Engineering, Corporate Security, Risk, and executive leaders to prioritize threats based on measurable business risk.

What you bring

• 8–12+ years of total experience, including 3–5+ years operating at a senior or staff-level scope in threat intelligence, brand protection, or cyber investigations.
• Hands-on experience tracking criminal ecosystems tied to phishing, scams, impersonation, fraud, and infrastructure abuse, and the ability to move from isolated indicators to campaign- and actor-level analysis.
• Deep familiarity with domain registration patterns, DNS and certificate transparency analysis, cloud and hosting abuse across providers (e.g., AWS, GCP, Azure, VPS), and attacker monetization methods.
• Experience using OSINT tooling, SQL, Python, notebooks, SIEM or SOAR platforms, OpenCTI, and case management systems to analyze data and automate workflows.
• Ability to translate complex technical threats into clear business risk for technical teams and executive audiences through strong written and verbal communication.
• Experience mentoring others or leading initiatives across teams, with a high level of accountability and sound risk judgment in ambiguous situations.

Nice to have

• Experience with crypto investigations or on-chain analysis.
• Background in highly regulated industries such as fintech, financial services, payments, crypto, healthcare, or government.

What we offer

• Challenging, high-impact work to grow your career.
• Performance-driven compensation with multipliers for outsized impact, bonus programs, equity ownership, and 401(k) matching.
• Best-in-class benefits to fuel your work, including 100% paid health insurance for employees with 90% coverage for dependents.
• Lifestyle wallet — a highly flexible benefits spending account for wellness, learning, and more.
• Employer-paid life & disability insurance, fertility benefits, and mental health benefits.
• Time off to recharge including company holidays, paid time off, sick time, parental leave, and more!
• Exceptional office experience with catered meals, events, and comfortable workspaces.

About the team + role

We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. 

The Product & Application Security team is responsible for ensuring security is built into how Robinhood designs, builds, and operates products. The team partners deeply with engineering and business leaders to shape secure architectures, guide risk-based decisions, and embed security assurance practices early in the development lifecycle. As Robinhood expands its use of AI technologies, this team plays a central role in defining secure AI platforms, governance, and visibility across the company!

As a Senior Engineering Manager, Product & Application Security, you will set strategy and lead execution for product and application security across multiple domains. You will manage and grow a team of security and software engineers while operating as a technical authority and trusted advisor to senior engineering and business leaders. This role owns high-impact security outcomes end-to-end, including AI platform security, automated security tooling, M&A security efforts, and the evolution of product security review processes, with accountability for both near-term delivery and long-term scalability.

This role is based in our Menlo Park, CA or Bellevue, WA offices, with in-person attendance expected 5 days per week.

At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams. 

What you’ll do

• Set the multi-quarter technical and organizational strategy for product and application security, aligned with company priorities and risk posture.
• Lead, develop, and retain a team of security and software engineers, including coaching senior ICs and building future leaders.
• Own the design, delivery, and long-term evolution of AI platform security, governance frameworks, and security visibility.
• Establish and scale product security review practices that shift security engagement earlier in the product lifecycle and are adopted broadly across engineering.
• Act as a senior security partner to engineering, product, and business leadership, influencing architectural decisions and balancing security risk with business outcomes.

What you bring

• Experience leading security, platform, or infrastructure teams at scale, with clear ownership of strategy, execution, and outcomes.
• Deep expertise in application and product security, with a strong understanding of modern software development and platform architectures.
• Proven ability to operate as a technical leader and influencer, not only a people manager.
• Track record of partnering with senior engineering and business stakeholders to drive security outcomes through collaboration rather than gatekeeping.
• Ability to navigate ambiguity, set direction, and make sound risk-based decisions that scale with the organization.

Leadership expectations

Our ambitious roadmap requires a great culture shaped by exceptional leaders. Here’s what we expect from them:

• Drive high performance by setting clear, focused goals, giving real-time feedback, stretching top talent, and scaling impact through focus, innovation, and tech.
• Hire and retain top talent by setting a high bar, hiring only those who raise it, investing in onboarding, and addressing talent issues quickly and fairly.
• Create community by connecting work to purpose, removing friction while prioritizing safety, building trust and inclusion, and leading from the front with integrity.

What we offer

• Challenging, high-impact work to grow your career.
• Performance-driven compensation with multipliers for outsized impact, bonus programs, equity ownership, and 401(k) matching.
• Best-in-class benefits to fuel your work, including 100% paid health insurance for employees with 90% coverage for dependents.
• Lifestyle wallet — a highly flexible benefits spending account for wellness, learning, and more.
• Employer-paid life & disability insurance, fertility benefits, and mental health benefits.
• Time off to recharge including company holidays, paid time off, sick time, parental leave, and more!
• Exceptional office experience with catered meals, events, and comfortable workspaces.

About the team + role

We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for thoughtful problem-solvers and builders who want to make a meaningful contribution. Robinhood is a place where people take ownership of their work and help improve financial access for all. We operate with high standards, clear accountability, and a strong focus on security and ethics in everything we build!

The Red Team’s mission is to identify and reduce real-world security risks across Robinhood by simulating adversary behavior and testing defenses. As a Staff Offensive Security Engineer, you will plan and execute security assessments across applications, infrastructure, and physical environments, and partner closely with engineering and security teams to strengthen detection and response capabilities. You will help prioritize risk, contribute to remediation efforts, and develop tools and techniques that improve how we test and secure our systems. Your work will directly support the safety and reliability of products used by millions of customers.

This role is based in our Menlo Park, CA office, with in-person attendance expected at least 3 days per week.

At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams.

What you’ll do

• Evangelize the Offensive Security Team’s Findings and Projects with stakeholders throughout the company and collaborate with other teams to create solutions that balance security with other priorities.
• Mentor and provide guidance to the members of the Offensive Security team.
• Plan and execute red team exercises, including long-term assessments that simulate real-world attack scenarios
• Perform threat modeling and penetration testing across applications, infrastructure, and corporate environments
• Develop scripts and tools to support and automate security testing activities
• Partner with detection and response teams to run adversarial simulations and improve incident readiness
• Communicate findings clearly and work with engineering teams to remediate identified risks
• Lead Security Incidents when Pentest or Red Team findings require them.
• Plan and participate in Adversarial Simulation exercises with various security teams.

What you bring

• 8+ years of experience conducting red team operations or advanced penetration testing
• Experience mentoring or supporting the development of other security engineers
• Passion and demonstrated experience for challenging security assumptions.
• Excellent written and verbal communication skills and ability to communicate your findings at many different levels of abstraction from Engineers to Executives.
• Passion for fixing security issues and not just identifying security issues.
• Familiarity with common network protocols and standards such as DNS and TCP/IP.
• Experience with MacOS and Linux.
• Experience with leveraging components of a modern software development stack to attack companies, including CI, container orchestration systems (Kubernetes/Docker), cloud providers (AWS, GCP), etc and be able to give hardening suggestions.
• Experience/knowledge of defensive tools/techniques (IDS/IPS, Packet Capture, Network Analysis, AV, EDR, etc.) and how to evade them.
• Deep understanding of Mitre’s ATT&CK Framework.
• Strong understanding of the security fundamentals of access and identity.
• Comfortable reading / writing python, go, and javascript.
• Ability to research and execute a testing plan to access a new technology or process.
• Demonstrated experience working with a distributed team.
• Proficiency to communicate over a text-based medium (Slack, JIRA Issues, GitHub issues, & Email) and can succinctly document technical details.

Bonus Points

• Experience in the Financial Technology domain.
• Experience being a technical lead at other organizations.

What we offer

• Market competitive and pay equity-focused compensation structure
• 100% paid health insurance for employees with 90% coverage for dependents
• Annual lifestyle wallet for personal wellness, learning and development, and more!
• Lifetime maximum benefit for family forming and fertility benefits
• Dedicated mental health support for employees and eligible dependents
• Generous time away including company holidays, paid time off, sick time, parental leave, and more!
• Lively office environment with catered meals, fully stocked kitchens, and geo-specific commuter benefits

About the team + role

We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. 

The Red Team team’s mission is to proactively identify and simulate real-world threats against Robinhood’s platforms, properties, and people. Through red teaming and adversarial simulations, the team evaluates security controls, uncovers vulnerabilities, and helps continuously strengthen Robinhood’s overall security posture in close partnership with Detection & Response, Physical Security, and Engineering.

As a Staff Offensive Security Engineer, you will take a hands-on role in designing and executing stealthy adversarial simulations to validate assumptions and uncover gaps in detection and response. You’ll leverage threat modeling, penetration testing, and research-driven techniques to emulate sophisticated attackers, while collaborating cross-functionally to improve defenses and shape more secure systems.

This role is based in our Toronto, Canada office(s), with in-person attendance expected at least 3 days per week. 

At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams.

What you’ll do

• Plan and execute red team operations, adversarial simulations, and penetration tests across applications, infrastructure, networks, offices, and internal processes.
• Perform threat modeling for new and existing services, clearly articulating security risks and tradeoffs to engineering and risk stakeholders.
• Conduct vulnerability research, exploit development, and testing using both custom tooling and public proof-of-concept techniques.
• Partner with detection and response teams to simulate realistic attack scenarios and evaluate monitoring and incident response readiness.
• Write and maintain tooling to automate and scale offensive security assessments.
• Serve as a subject matter expert by documenting findings, recommending remediation strategies, and supporting teams through fixes.
• Mentor teammates and contribute to shared knowledge through internal documentation, presentations, and external talks or blog posts.

What you bring

• 8+ years of hands-on experience in red teaming, offensive security, or penetration testing.
• Demonstrated experience mentoring or guiding other security engineers.
• Strong understanding of threat modeling methodologies and the MITRE ATT&CK framework.
• Experience testing modern environments, including cloud platforms (AWS, GCP), containerized systems (Docker, Kubernetes), CI pipelines, and identity systems.
• Working knowledge of defensive security tools such as IDS/IPS, EDR, packet capture, and network monitoring, including common evasion techniques.
• Proficiency in Python, Go, or JavaScript for exploit development, tooling, or automation.
• Clear written and verbal communication skills, with the ability to explain technical findings to both engineers and senior leaders.
• Experience collaborating with distributed teams and documenting work through tools such as Slack, Jira, GitHub, and email.

Bonus points:

• Experience working in financial technology or regulated environments.
• Prior experience serving as a technical lead on security initiatives.

What we offer

• Challenging, high-impact work to grow your career
• Performance driven compensation with multipliers for outsized impact, bonus programs, and equity ownership
• Top tier benefits to fuel your work, including supplemental health insurance, ancillary insurance, and mental health support programs
• Lifestyle wallet - a highly flexible employer-paid benefits spending account expenses beyond traditional benefits such as wellness, childcare, learning, and more.
• Time off to recharge including company holidays, paid time off, sick time, paid volunteer time off, parental leave, and more!
• Exceptional office experience with catered meals, events, and comfortable workspaces. 
• Monthly commuter stipend to help offset in-office commuting costs

Our team is committed to providing an inclusive and welcoming interview experience for all candidates. If you require a specific accommodation during the application or interview process due to a physical or mental condition, please complete this Applicant Accommodation Form to notify our team. The form should only be completed if you need a specific accommodation.

AI Usage Disclosure: Robinhood uses artificial intelligence (AI) tools to support parts of our recruiting process. These tools enhance the efficiency and consistency of our hiring process; however, all hiring decisions are made by our hiring teams.

Vacancy Notice: This job posting represents an existing vacancy that we are actively seeking to fill.