About the team + role

We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. 

The Security Operations (SecOps) team works to safeguard Robinhood and its customers by identifying, investigating, and responding to security threats. The team monitors production systems, endpoints, and cloud environments, and uses threat intelligence and structured testing to uncover risks before they affect customers. SecOps partners closely with engineering and infrastructure teams to strengthen detection coverage and response readiness. The team’s focus is clear: reduce risk, improve visibility, and protect customer trust every day!

As a Security Engineer, Detection & Response, you will strengthen Robinhood’s ability to detect, investigate, and contain security incidents. You will design and improve detection logic, analyze security telemetry across cloud and endpoint systems, and contribute to measurable reductions in false positives and detection gaps. You will work directly with SOC analysts and security engineers to refine investigation workflows and document incident findings. This role is ideal for someone who enjoys hands-on detection engineering and improving how teams respond to real-world threats!

This role is based in our Menlo Park, CA office, with in-person attendance expected at least 3 days per week.

At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams.

What you’ll do

• Investigate security alerts across SIEM, EDR, and cloud security platforms, perform log analysis, and coordinate containment or remediation steps with engineering partners
• Develop, test, and tune detection rules using query languages to improve signal quality and reduce false positives
• Correlate data from multiple telemetry sources to identify attack patterns and determine appropriate response actions
• Monitor emerging threats and update detection logic based on investigation findings and threat intelligence reporting
• Contribute to automation efforts by building or refining SOAR playbooks and scripts that improve investigation speed and consistency
• Document incidents and contribute to post-incident reviews with clear findings and recommended improvements to detection and response processes

What you bring

• 2–4 years of experience in security operations, detection engineering, or incident response
• Experience analyzing logs and tuning alerts within SIEMs, EDR platforms, and cloud security tools
• Experience writing detections using query languages (e.g., SQL-like, KQL, or similar)
• Familiarity with threat hunting and investigation techniques across cloud and endpoint environments
• Ability to analyze security telemetry, identify patterns of malicious activity, and recommend practical improvements
• Clear written and verbal communication skills when documenting incidents and collaborating with technical teams

Nice to have:

Our ambitious roadmap requires a great culture shaped by exceptional leaders. Here’s what we expect from them:

• Experience developing and deploying SOAR playbooks to automate detection and response workflows
• Familiarity with AWS, Okta, Kubernetes, and/or Google Workspace security monitoring tools
• Experience writing software to support detection and response tooling with a focus on secure, maintainable code
• Experience in building Agentic workflows, optimizing workflows with Generative AI

What we offer

• Challenging, high-impact work to grow your career.
• Performance-driven compensation with multipliers for outsized impact, bonus programs, equity ownership, and 401(k) matching.
• Best-in-class benefits to fuel your work, including 100% paid health insurance for employees with 90% coverage for dependents.
• Lifestyle wallet — a highly flexible benefits spending account for wellness, learning, and more.
• Employer-paid life & disability insurance, fertility benefits, and mental health benefits.
• Time off to recharge including company holidays, paid time off, sick time, parental leave, and more!
• Exceptional office experience with catered meals, events, and comfortable workspaces.

About the team + role

We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. 

The Security Operations (SecOps) team works to safeguard Robinhood and its customers by identifying, investigating, and responding to security threats. The team monitors production systems, endpoints, and cloud environments, and uses threat intelligence and structured testing to uncover risks before they affect customers. SecOps partners closely with engineering and infrastructure teams to strengthen detection coverage and response readiness. The team’s focus is clear: reduce risk, improve visibility, and protect customer trust every day!

As a Security Engineer, Detection & Response, you will strengthen Robinhood’s ability to detect, investigate, and contain security incidents. You will design and improve detection logic, analyze security telemetry across cloud and endpoint systems, and contribute to measurable reductions in false positives and detection gaps. You will work directly with SOC analysts and security engineers to refine investigation workflows and document incident findings. This role is ideal for someone who enjoys hands-on detection engineering and improving how teams respond to real-world threats!

This role is based in our Toronto, Canada office(s), with in-person attendance expected at least 3 days per week. 

At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams.

What you’ll do

• Investigate security alerts across SIEM, EDR, and cloud security platforms, perform log analysis, and coordinate containment or remediation steps with engineering partners
• Develop, test, and tune detection rules using query languages to improve signal quality and reduce false positives
• Correlate data from multiple telemetry sources to identify attack patterns and determine appropriate response actions
• Monitor emerging threats and update detection logic based on investigation findings and threat intelligence reporting
• Contribute to automation efforts by building or refining SOAR playbooks and scripts that improve investigation speed and consistency
• Document incidents and contribute to post-incident reviews with clear findings and recommended improvements to detection and response processes

What you bring

• 2–4 years of experience in security operations, detection engineering, or incident response
• Experience analyzing logs and tuning alerts within SIEMs, EDR platforms, and cloud security tools
• Experience writing detections using query languages (e.g., SQL-like, KQL, or similar)
• Familiarity with threat hunting and investigation techniques across cloud and endpoint environments
• Ability to analyze security telemetry, identify patterns of malicious activity, and recommend practical improvements
• Clear written and verbal communication skills when documenting incidents and collaborating with technical teams

Nice to have:

Our ambitious roadmap requires a great culture shaped by exceptional leaders. Here’s what we expect from them:

• Experience developing and deploying SOAR playbooks to automate detection and response workflows
• Familiarity with AWS, Okta, Kubernetes, and/or Google Workspace security monitoring tools
• Experience writing software to support detection and response tooling with a focus on secure, maintainable code
• Experience in building Agentic workflows, optimizing workflows with Generative AI

What we offer

• Challenging, high-impact work to grow your career
• Performance driven compensation with multipliers for outsized impact, bonus programs, and equity ownership
• Top tier benefits to fuel your work, including supplemental health insurance, ancillary insurance, and mental health support programs
• Lifestyle wallet - a highly flexible employer-paid benefits spending account expenses beyond traditional benefits such as wellness, childcare, learning, and more.
• Time off to recharge including company holidays, paid time off, sick time, paid volunteer time off, parental leave, and more!
• Exceptional office experience with catered meals, events, and comfortable workspaces. 
• Monthly commuter stipend to help offset in-office commuting costs

Our team is committed to providing an inclusive and welcoming interview experience for all candidates. If you require a specific accommodation during the application or interview process due to a physical or mental condition, please complete this Applicant Accommodation Form to notify our team. The form should only be completed if you need a specific accommodation.

AI Usage Disclosure: Robinhood uses artificial intelligence (AI) tools to support parts of our recruiting process. These tools enhance the efficiency and consistency of our hiring process; however, all hiring decisions are made by our hiring teams.

Vacancy Notice: This job posting represents an existing vacancy that we are actively seeking to fill.

About the team & role

Our Core Exchange team is responsible for all trading interfaces — including the Exchange REST API, FIX API, WebSockets, and market data services. The team’s mission is to deliver a best-in-class trading experience for API users, with a relentless focus on latency, reliability, and data correctness.

As a Staff Software Engineer, you will help scale our trading infrastructure to meet the evolving needs of our most sophisticated users. This is a high-impact role for engineers who love low-latency systems, deeply care about precision, and want to directly shape the tools used by active traders worldwide.

What you'll do

• Design and build performant, reliable, and scalable services for our API trading ecosystem.
• Optimize low-latency data flows and trading paths, ensuring correctness under pressure.
• Own and evolve core components of our REST, FIX, and WebSocket APIs.
• Collaborate with product, infrastructure, and frontend teams to deliver seamless API solutions.
• Participate in the team’s on-call rotation, supporting mission-critical systems used by our most active clients.
• Continuously measure, monitor, and improve the trading API experience.

What you bring

• 10+ years of backend engineering experience.
• Proven experience designing high-performance systems with low-latency and high-throughput requirements.
  Familiarity with cloud infrastructure, especially AWS services.
• Solid database experience: SQL (MySQL) and/or NoSQL (DynamoDB).
• Experience working on or with production-grade trading APIs or high-volume systems.
• Structured thinker with strong communication skills and a customer-first mindset.

Nice to have

• You’ve built or operated your own automated trading bot or trading system.
• Hands-on experience with the FIX protocol and order management systems.
• Knowledge of WebSockets, streaming market data, or real-time API performance tuning.
• Passion for financial markets and an interest in building tools for professional traders.

About the Team + Role: 

We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards.

Bitstamp made history in 2011 as the world’s first regulated crypto exchange. Today, we are entering an ambitious new chapter as part of the Robinhood family. The Cloud Engineering Team is at the heart of this transformation, owning the AWS foothold that enables our global expansion and ensures the world’s longest-running exchange remains unshakeable.

We are currently bridging the gap between our legacy monolith architecture and a modern, high-velocity ecosystem. This team doesn't just "run" the platform; we are the architects of its modernization, moving toward full containerization and fully automated operational responsibilities to deliver at "Robinhood speed."

As a Senior Backend Engineer integrated into the Cloud Engineering team, you will be a key driver of our modernization strategy. You aren't just writing features; you are rewriting the rules of how our core platform operates. You will take ownership of the code changes necessary to decompose our monolith into a containerized, scalable environment while ensuring seamless integration with Robinhood’s global systems.

This role is based in our Ljubljana office(s), with in-person attendance expected at least  3days per week. 

At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams. 

Applications for this role will be accepted through April 27th, 2026.

Requires participation in an on-call rotation to support business needs.

What You’ll Do:

• Containerize the Core: Lead the effort to containerize our monolith application, making the critical code adjustments required to modernize our deployment and scaling workflows.
• Robinhood Ecosystem Integration: Manage and execute high-priority integration projects that align Bitstamp’s backend with Robinhood’s global infrastructure.
• Evolve the Stack: Identify and implement backend improvements that enhance platform performance and reduce operational toil through intelligent automation (with and without AI).
• End-to-End Ownership: Take full responsibility for complex projects from design to deployment, working independently with limited supervision and making meaningful decisions to improve system effectiveness.
• Cross-Functional Influence: Collaborate with teams across the organization to interpret complex technical requirements and influence processes that enhance our overall engineering velocity.
• Maintain Platform Integrity: Participate in the on-call rotation, applying your deep knowledge of the system to solve difficult problems and ensure 24/7 reliability.

What You Bring:

• Applied Expertise: 4–5+ years of relevant experience in backend engineering, with a strong background in containerization (Docker, Kubernetes) and modernizing legacy architectures.
• Technical Depth: Advanced knowledge of backend disciplines and practical experience with AWS services (ECS, EC2, Aurora, DynamoDB).
• Proven Autonomy: An experienced contributor who has managed entire projects or processes, coordinating across different job areas to solve difficult, multi-faceted problems.
• Operational Pragmatism: Someone who thrives on the challenge of taking a stable system and "paving the road" toward automation while balancing necessary day-to-day operational tasks.
• Collaboration & Influence: Strong communication skills to guide and coach other employees, and the ability to influence stakeholders outside of your immediate department to reach technical agreements.
• Project Mastery: Practical knowledge of project management and the ability to manage complex administrative and technical logistics within a fast-moving organization.

What we offer

• Challenging, high-impact work to grow your career
• Performance driven compensation with multipliers for outsized impact and bonus programs
• Top tier benefits to fuel your work, including supplemental health insurance, ancillary insurance, and mental health support programs
• Lifestyle wallet - a highly flexible employer-paid benefits spending account expenses beyond traditional benefits such as wellness, childcare, learning, and more.
• Time off to recharge including company holidays, paid time off, sick time, paid volunteer time off, parental leave, and more!
• Exceptional office experience with catered meals, events, and comfortable workspaces. 
• Monthly commuter stipend to help offset in-office commuting costs

About the team + role

We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards.

The Bitstamp Cloud Engineering team is responsible for designing, maintaining, and scaling the AWS infrastructure that powers our global crypto exchange. As part of the Robinhood family, we are aligning our systems to support global expansion while maintaining the stability and reliability our institutional customers depend on. The team partners closely with Security, Data, Product Engineering, and Platform teams to ensure our infrastructure supports secure trading, high availability, and regulatory requirements. We value practical solutions, operational rigor, and steady progress toward automation and long-term scalability!

As a Senior Cloud Engineer, you will be an established individual contributor responsible for the reliability, scalability, and modernization of our AWS environment. You will manage core compute and database infrastructure while contributing to projects that align Bitstamp’s systems with Robinhood’s broader platform architecture. This role balances hands-on operational support with forward-looking automation work, reducing manual effort and improving system resilience. Your work will directly support high-volume trading systems and ensure our platform performs consistently as we scale globally!

This role is based in our Ljubljana office(s), with in-person attendance expected at least 3 days per week. 

At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams.

Applications for this role will be accepted through April 27th, 2026

Requires participation in an on-call rotation to support business needs.

What you’ll do

● You manage and troubleshoot AWS services including EC2, ECS, Aurora, and DynamoDB to ensure high availability and performance.
● You contribute to infrastructure projects that align Bitstamp systems with Robinhood’s global platform architecture and shared services.
● You identify manual operational processes and implement automation using infrastructure-as-code and workflow tooling.
● You monitor database and compute capacity, adjusting configurations to support platform growth and transaction volume.
● You participate in the on-call rotation, diagnosing and resolving production issues to maintain 24/7 system stability.

What you bring

● You have 2–3+ years of hands-on experience in Cloud Engineering, DevOps, or Infrastructure Engineering within AWS environments.
● You have practical experience with EC2, ECS, and database technologies such as Aurora and DynamoDB.
● You use structured troubleshooting methods and data analysis to resolve moderately complex infrastructure issues.
● You are comfortable balancing operational responsibilities with incremental automation improvements.
● You communicate technical concepts clearly and collaborate effectively with engineering and platform teams.

What we offer

• Challenging, high-impact work to grow your career
• Performance driven compensation with multipliers for outsized impact and bonus programs
• Top tier benefits to fuel your work, including supplemental health insurance, ancillary insurance, and mental health support programs
• Lifestyle wallet - a highly flexible employer-paid benefits spending account expenses beyond traditional benefits such as wellness, childcare, learning, and more.
• Time off to recharge including company holidays, paid time off, sick time, paid volunteer time off, parental leave, and more!
• Exceptional office experience with catered meals, events, and comfortable workspaces. 
• Monthly commuter stipend to help offset in-office commuting costs

About the team + role

What you’ll do

• Lead and grow a team of backend engineers responsible for Bitstamp’s core derivatives trading platform
• Set the technical direction for high-performance services including order matching, risk systems, and consensus-based infrastructure
• Drive project execution and ensure systems meet SLAs around low latency, data integrity, and uptime
• Collaborate closely with product, security, and infrastructure teams to support market expansion and new contract listings
• Foster a high-trust, inclusive team culture that prioritizes speed, accountability, and continuous improvement

What you bring

• Experience managing or tech leading backend engineering teams in performance-critical environments
• Deep technical background in Golang, distributed systems, and cloud-native architecture (preferably AWS)
• Proven ability to scale infrastructure and services to meet demanding throughput and latency requirements
• Passion for mentoring engineers, setting a high technical bar, and growing top-tier teams
• Clear communication skills and ability to lead through complexity, ambiguity, and urgency

About the team + role

We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are motivated to make a meaningful impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards!

The Core Exchange team is responsible for building and maintaining trading interfaces including REST APIs, FIX APIs, WebSockets, and market data services. The team focuses on delivering fast, reliable, and accurate trading experiences for API users. You will work closely with infrastructure, product, and frontend teams to ensure trading systems meet strict performance and reliability expectations while supporting a global user base.

As a Senior Software Engineer (IC5), you will design and scale systems that power trading infrastructure used by sophisticated clients. You will focus on improving latency, system reliability, and data accuracy across critical trading paths. This role involves working on core API components and optimizing performance under high-throughput conditions, while contributing to system design decisions that directly impact active traders worldwide!

This role is based in our Slovenia office, with in-person attendance expected at least 2 days per week.

At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams.

Applications for this role will be accepted through 6/1/2026.

Requires participation in an on-call rotation to support business needs.

What you’ll do

● Design and build reliable, scalable services that support API-based trading systems
● Improve latency and throughput across trading data flows while maintaining data accuracy
● Own and enhance core components of REST, FIX, and WebSocket APIs
● Collaborate with product, infrastructure, and frontend teams to deliver cohesive API solutions
● Monitor system performance and implement improvements based on measurable system behavior

What you bring

● You have 5+ years of backend engineering experience
● You have experience building high-performance systems with low-latency and high-throughput requirements
● You are familiar with cloud infrastructure, including AWS services
● You have experience working with SQL (e.g., MySQL) and/or NoSQL databases (e.g., DynamoDB)
● You have experience working with production systems that handle high request volumes

What we offer

● Challenging, high-impact work to grow your career
● Performance driven compensation with multipliers for outsized impact, bonus programs, and equity ownership
● Top tier benefits to fuel your work, including supplemental health insurance, ancillary insurance, and mental health support programs
● Lifestyle wallet - a highly flexible employer-paid benefits spending account expenses beyond traditional benefits such as wellness, childcare, learning, and more
● Time off to recharge including company holidays, paid time off, sick time, paid volunteer time off, parental leave, and more!
● Exceptional office experience with catered meals, events, and comfortable workspaces
● Monthly commuter stipend to help offset in-office commuting costs

About the team + role

We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. 

The Threat Intelligence team reduces organizational risk by rapidly detecting, understanding, and disrupting adversary activity. We research criminal ecosystems targeting our brand, customers, and infrastructure, and work with partners to translate that intelligence into detections, controls, and customer protections. Our work enables Security, Engineering, Trust & Safety, and executive leaders to focus resources where risk is highest. We operate with a strong sense of ownership, clear communication, and a commitment to protecting customers so they can confidently participate in the financial system!

As a Staff Security Analyst, Threat Intelligence, you will operate at the forefront of advanced and evolving threats targeting Robinhood and our customers. You will actively hunt for emerging phishing, scam, impersonation, fraud, and infrastructure abuse campaigns while building scalable systems that turn intelligence into action. This role combines hands-on investigation, program design, mentorship, and stakeholder engagement. Your work will shape proactive controls, influence product and security decisions, and strengthen our overall threat defense strategy.

This role is based in our Toronto, Canada office(s), with in-person attendance expected at least 3 days per week. 

At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams.

What you’ll do

• Proactively hunt and map criminal ecosystems targeting Robinhood and its customers, then translate intelligence into scalable systems and coordinated defenses that disrupt adversaries before they cause harm.
• Build and operationalize a comprehensive “Universe of Threats” by identifying, tracking, and prioritizing adversaries across phishing, scams, impersonation, fraud, and infrastructure abuse.
• Establish and mature a proactive threat intelligence lifecycle by developing industry partnerships, collaborating with trusted peers and federal authorities, and cultivating online personas to generate early warning capabilities that protect Robinhood’s business operations.
• Investigate attacker infrastructure across domains, DNS, certificate transparency logs, cloud providers, and telecom platforms, and convert findings into concrete detections, controls, and customer protections.
• Coordinate threat actor infrastructure takedowns with hosting providers, domain registrars, cloud platforms, and other infrastructure partners to disrupt adversary operations at scale.
• Design and automate intelligence workflows using OSINT tooling, enrichment pipelines, data analysis tools, and case management systems to scale analysis and reporting.
• Partner directly with Detection & Response, Automation, Customer Trust & Safety (Fraud and Financial Crimes), Security Engineering, Corporate Security, Risk, and executive leaders to prioritize threats based on measurable business risk.

What you bring

• 8–12+ years of total experience, including 3–5+ years operating at a senior or staff-level scope in threat intelligence, brand protection, or cyber investigations.
• Hands-on experience tracking criminal ecosystems tied to phishing, scams, impersonation, fraud, and infrastructure abuse, and the ability to move from isolated indicators to campaign- and actor-level analysis.
• Deep familiarity with domain registration patterns, DNS and certificate transparency analysis, cloud and hosting abuse across providers (e.g., AWS, GCP, Azure, VPS), and attacker monetization methods.
• Experience using OSINT tooling, SQL, Python, notebooks, SIEM or SOAR platforms, OpenCTI, and case management systems to analyze data and automate workflows.
• Ability to translate complex technical threats into clear business risk for technical teams and executive audiences through strong written and verbal communication.
• Experience mentoring others or leading initiatives across teams, with a high level of accountability and sound risk judgment in ambiguous situations.

Nice to have

• Experience with crypto investigations or on-chain analysis.
• Background in highly regulated industries such as fintech, financial services, payments, crypto, healthcare, or government.

About the team + role

We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. 

The Red Team team’s mission is to proactively identify and simulate real-world threats against Robinhood’s platforms, properties, and people. Through red teaming and adversarial simulations, the team evaluates security controls, uncovers vulnerabilities, and helps continuously strengthen Robinhood’s overall security posture in close partnership with Detection & Response, Physical Security, and Engineering.

As a Staff Offensive Security Engineer, you will take a hands-on role in designing and executing stealthy adversarial simulations to validate assumptions and uncover gaps in detection and response. You’ll leverage threat modeling, penetration testing, and research-driven techniques to emulate sophisticated attackers, while collaborating cross-functionally to improve defenses and shape more secure systems.

This role is based in our Toronto, Canada office(s), with in-person attendance expected at least 3 days per week. 

At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams.

What you’ll do

• Plan and execute red team operations, adversarial simulations, and penetration tests across applications, infrastructure, networks, offices, and internal processes.
• Perform threat modeling for new and existing services, clearly articulating security risks and tradeoffs to engineering and risk stakeholders.
• Conduct vulnerability research, exploit development, and testing using both custom tooling and public proof-of-concept techniques.
• Partner with detection and response teams to simulate realistic attack scenarios and evaluate monitoring and incident response readiness.
• Write and maintain tooling to automate and scale offensive security assessments.
• Serve as a subject matter expert by documenting findings, recommending remediation strategies, and supporting teams through fixes.
• Mentor teammates and contribute to shared knowledge through internal documentation, presentations, and external talks or blog posts.

What you bring

• 8+ years of hands-on experience in red teaming, offensive security, or penetration testing.
• Demonstrated experience mentoring or guiding other security engineers.
• Strong understanding of threat modeling methodologies and the MITRE ATT&CK framework.
• Experience testing modern environments, including cloud platforms (AWS, GCP), containerized systems (Docker, Kubernetes), CI pipelines, and identity systems.
• Working knowledge of defensive security tools such as IDS/IPS, EDR, packet capture, and network monitoring, including common evasion techniques.
• Proficiency in Python, Go, or JavaScript for exploit development, tooling, or automation.
• Clear written and verbal communication skills, with the ability to explain technical findings to both engineers and senior leaders.
• Experience collaborating with distributed teams and documenting work through tools such as Slack, Jira, GitHub, and email.

Bonus points:

• Experience working in financial technology or regulated environments.
• Prior experience serving as a technical lead on security initiatives.

What we offer

• Challenging, high-impact work to grow your career
• Performance driven compensation with multipliers for outsized impact, bonus programs, and equity ownership
• Top tier benefits to fuel your work, including supplemental health insurance, ancillary insurance, and mental health support programs
• Lifestyle wallet - a highly flexible employer-paid benefits spending account expenses beyond traditional benefits such as wellness, childcare, learning, and more.
• Time off to recharge including company holidays, paid time off, sick time, paid volunteer time off, parental leave, and more!
• Exceptional office experience with catered meals, events, and comfortable workspaces. 
• Monthly commuter stipend to help offset in-office commuting costs

Our team is committed to providing an inclusive and welcoming interview experience for all candidates. If you require a specific accommodation during the application or interview process due to a physical or mental condition, please complete this Applicant Accommodation Form to notify our team. The form should only be completed if you need a specific accommodation.

AI Usage Disclosure: Robinhood uses artificial intelligence (AI) tools to support parts of our recruiting process. These tools enhance the efficiency and consistency of our hiring process; however, all hiring decisions are made by our hiring teams.

Vacancy Notice: This job posting represents an existing vacancy that we are actively seeking to fill.

About the team + role

We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. 

The Threat Intelligence team reduces organizational risk by rapidly detecting, understanding, and disrupting adversary activity. We research criminal ecosystems targeting our brand, customers, and infrastructure, and work with partners to translate that intelligence into detections, controls, and customer protections. Our work enables Security, Engineering, Trust & Safety, and executive leaders to focus resources where risk is highest. We operate with a strong sense of ownership, clear communication, and a commitment to protecting customers so they can confidently participate in the financial system!

As a Staff Security Analyst, Threat Intelligence, you will operate at the forefront of advanced and evolving threats targeting Robinhood and our customers. You will actively hunt for emerging phishing, scam, impersonation, fraud, and infrastructure abuse campaigns while building scalable systems that turn intelligence into action. This role combines hands-on investigation, program design, mentorship, and stakeholder engagement. Your work will shape proactive controls, influence product and security decisions, and strengthen our overall threat defense strategy.

This role is based in our Menlo Park, CA office, with in-person attendance expected at least 3 days per week.

At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams.

What you’ll do

• Proactively hunt and map criminal ecosystems targeting Robinhood and its customers, then translate intelligence into scalable systems and coordinated defenses that disrupt adversaries before they cause harm.
• Build and operationalize a comprehensive “Universe of Threats” by identifying, tracking, and prioritizing adversaries across phishing, scams, impersonation, fraud, and infrastructure abuse.
• Establish and mature a proactive threat intelligence lifecycle by developing industry partnerships, collaborating with trusted peers and federal authorities, and cultivating online personas to generate early warning capabilities that protect Robinhood’s business operations.
• Investigate attacker infrastructure across domains, DNS, certificate transparency logs, cloud providers, and telecom platforms, and convert findings into concrete detections, controls, and customer protections.
• Coordinate threat actor infrastructure takedowns with hosting providers, domain registrars, cloud platforms, and other infrastructure partners to disrupt adversary operations at scale.
• Design and automate intelligence workflows using OSINT tooling, enrichment pipelines, data analysis tools, and case management systems to scale analysis and reporting.
• Partner directly with Detection & Response, Automation, Customer Trust & Safety (Fraud and Financial Crimes), Security Engineering, Corporate Security, Risk, and executive leaders to prioritize threats based on measurable business risk.

What you bring

• 8–12+ years of total experience, including 3–5+ years operating at a senior or staff-level scope in threat intelligence, brand protection, or cyber investigations.
• Hands-on experience tracking criminal ecosystems tied to phishing, scams, impersonation, fraud, and infrastructure abuse, and the ability to move from isolated indicators to campaign- and actor-level analysis.
• Deep familiarity with domain registration patterns, DNS and certificate transparency analysis, cloud and hosting abuse across providers (e.g., AWS, GCP, Azure, VPS), and attacker monetization methods.
• Experience using OSINT tooling, SQL, Python, notebooks, SIEM or SOAR platforms, OpenCTI, and case management systems to analyze data and automate workflows.
• Ability to translate complex technical threats into clear business risk for technical teams and executive audiences through strong written and verbal communication.
• Experience mentoring others or leading initiatives across teams, with a high level of accountability and sound risk judgment in ambiguous situations.

Nice to have

• Experience with crypto investigations or on-chain analysis.
• Background in highly regulated industries such as fintech, financial services, payments, crypto, healthcare, or government.

What we offer

• Challenging, high-impact work to grow your career.
• Performance-driven compensation with multipliers for outsized impact, bonus programs, equity ownership, and 401(k) matching.
• Best-in-class benefits to fuel your work, including 100% paid health insurance for employees with 90% coverage for dependents.
• Lifestyle wallet — a highly flexible benefits spending account for wellness, learning, and more.
• Employer-paid life & disability insurance, fertility benefits, and mental health benefits.
• Time off to recharge including company holidays, paid time off, sick time, parental leave, and more!
• Exceptional office experience with catered meals, events, and comfortable workspaces.

About the team & role

We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. 

The team’s mission is to safeguard the financial stability of our trading operations. By independently challenging front-line strategies and validating complex margin models, we ensure the safe and sustainable growth of our derivatives product.

As a Derivatives Risk Oversight Lead, you will serve as a key representative of Second Line of Defense for our derivatives trading platform, leading the oversight and continuous enhancement of risk management frameworks across the derivatives product and the Bitstamp Financial Services (BFS) entity.

This role is based in our Luxembourg office, with in-person attendance expected at least 3 days per week.

At Bitstamp by Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams.

What you’ll do

• Support the Director of Risk in implementing and managing the financial risk management programs for the Bitstamp Financial Services (BFS) Entity and other parts of the Bitstamp group, with particular focus on market, product, counterparty, margin, collateral, and liquidity risks arising from spot and derivatives activities.
• Provide independent monitoring of risk exposures across financial and operational risks and escalate breaches of approved limits, with a primary emphasis on trading-related risks and scalable control design as the business grows.
• Review and validate risk models and assess exposure metrics across derivatives products and trading strategies, including independent challenge of product calculations, valuation logic, exposure metrics, and model assumptions.
• Define and periodically review margin methodologies. Independently assess the adequacy of margin and collateral practices implemented by 1LOD, including initial margin, maintenance margin, liquidation thresholds, collateral haircuts, concentration add-ons, and stressed close-out assumptions.
• Define counterparty risk framework and limits; independently monitor exposures and challenge limit utilization, concentration risk, and interconnected exposures across spot and derivatives books.
• Conduct stress testing and scenario analysis to assess the impact of adverse market conditions and extreme events on the derivatives portfolio and develop contingency plans accordingly, including the design of independent house stress scenarios and the ability to reproduce and challenge 1LOD stress calculations.
• Complete quarterly regulatory submissions required under the MiFID license, such as capital requirement calculation (ICAAP) and quantitative reporting, including prudential risk indicators.
• Build or enhance internal capital and liquidity models, taking into account new risks arising from derivatives trading within the BFS entity,, including risks related to perpetual swaps, leverage, funding mechanics, basis dislocations, liquidation events, market gaps, and stressed liquidity.
• Participate in development of key risk and early warning indicators and monitoring as well as reviews of risk appetites, including collaboration with 1LOD on defining KPI/KRI thresholds and escalation triggers (e.g., green/orange/red status).
• Establish a regular and repeatable risk assessment process covering daily monitoring, weekly and monthly deep dives, periodic model and margin review, exception tracking, and formal escalation governance.
• Collaborate with process owners to facilitate appropriate management and control of all material risks for the BFS entity, while acting as a subject-matter expert on derivatives and trading risk.
• Promote a risk-aware culture, including facilitating regulatory-required risk training, and support clear ownership between 1LOD and 2LOD in risk identification, challenge, escalation, and remediation.
• Report findings to management and regulatory authorities, highlighting key risk metrics, exposures, and mitigating actions, with clear articulation of breaches, trends, emerging risks, and required management actions.
• Collaborate closely with Product, Operations, Compliance, Legal, and Technology teams to ensure that risk management considerations are integrated into business processes and decision-making, including new product approval, control design, risk tooling, and scalable operating processes.
• Independently connduct spot and derivatives risk assessments, including hedge effectiveness, basis risk, collateral sufficiency, concentration risk, and the impact of extreme market moves across linked positions.
• Support the scaling of the business by ensuring that risk methodologies, controls, reporting, and governance remain robust as volumes, client complexity, and product range increase.

What you bring

• 5+ years of experience in financial risk management, ideally in a second line of defense capacity. Experience in a derivatives trading firm or brokerage is strongly preferred, and direct derivatives/market risk experience is essential.
• Excellent analytical skills and attention to detail, with the ability to interpret complex data and identify actionable insights, and to independently test, recalculate, and challenge front-line risk metrics and product outputs.
• Good understanding of the MiFID regulatory framework (particularly derivatives) and prudential expectations relevant to investment firms offering derivatives products.
• Good knowledge of the components of a balance sheet and drivers of income, including the capital, liquidity, and P&L implications of leveraged derivatives activity.
• Ability to operate independently and navigate ambiguity.
• Effective communication and presentation skills, including the ability to challenge senior stakeholders with credible quantitative analysis and clear risk recommendations.
• Knowledge of the blockchain and virtual currency environment is preferred, with a strong understanding of crypto market structure, spot trading, derivatives products, and perpetual swaps.
• Excellent English language skills (written and verbal).

What we offer

• Challenging, high-impact work to grow your career.
• Performance driven compensation with multipliers for outsized impact and bonus programs.
• Top tier benefits to fuel your work, including supplemental health insurance, ancillary insurance, and mental health support programs.
• Lifestyle wallet - a highly flexible employer-paid benefits spending account expenses beyond traditional benefits such as wellness, childcare, learning, and more.
• Time off to recharge including company holidays, paid time off, sick time, paid volunteer time off, parental leave, and more!
• Exceptional office experience with catered meals, events, and comfortable workspaces. 
• Monthly commuter stipend to help offset in-office commuting costs.

About the team & role

We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. 

The team’s mission is to safeguard the financial stability of our trading operations. By independently challenging front-line strategies and validating complex margin models, we ensure the safe and sustainable growth of our derivatives product.

As a Derivatives Risk Oversight Lead, you will serve as a key representative of Second Line of Defense for our derivatives trading platform, leading the oversight and continuous enhancement of risk management frameworks across the derivatives product and the Bitstamp Financial Services (BFS) entity.

This role is based in our Ljubljana office, with in-person attendance expected at least 3 days per week.

At Bitstamp by Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams.

Applications for this role will be accepted through May 29, 2026.

What you’ll do

• Support the Director of Risk in implementing and managing the financial risk management programs for the Bitstamp Financial Services (BFS) Entity and other parts of the Bitstamp group, with particular focus on market, product, counterparty, margin, collateral, and liquidity risks arising from spot and derivatives activities.
• Provide independent monitoring of risk exposures across financial and operational risks and escalate breaches of approved limits, with a primary emphasis on trading-related risks and scalable control design as the business grows.
• Review and validate risk models and assess exposure metrics across derivatives products and trading strategies, including independent challenge of product calculations, valuation logic, exposure metrics, and model assumptions.
• Define and periodically review margin methodologies. Independently assess the adequacy of margin and collateral practices implemented by 1LOD, including initial margin, maintenance margin, liquidation thresholds, collateral haircuts, concentration add-ons, and stressed close-out assumptions.
• Define counterparty risk framework and limits; independently monitor exposures and challenge limit utilization, concentration risk, and interconnected exposures across spot and derivatives books.
• Conduct stress testing and scenario analysis to assess the impact of adverse market conditions and extreme events on the derivatives portfolio and develop contingency plans accordingly, including the design of independent house stress scenarios and the ability to reproduce and challenge 1LOD stress calculations.
• Complete quarterly regulatory submissions required under the MiFID license, such as capital requirement calculation (ICAAP) and quantitative reporting, including prudential risk indicators.
• Build or enhance internal capital and liquidity models, taking into account new risks arising from derivatives trading within the BFS entity,, including risks related to perpetual swaps, leverage, funding mechanics, basis dislocations, liquidation events, market gaps, and stressed liquidity.
• Participate in development of key risk and early warning indicators and monitoring as well as reviews of risk appetites, including collaboration with 1LOD on defining KPI/KRI thresholds and escalation triggers (e.g., green/orange/red status).
• Establish a regular and repeatable risk assessment process covering daily monitoring, weekly and monthly deep dives, periodic model and margin review, exception tracking, and formal escalation governance.
• Collaborate with process owners to facilitate appropriate management and control of all material risks for the BFS entity, while acting as a subject-matter expert on derivatives and trading risk.
• Promote a risk-aware culture, including facilitating regulatory-required risk training, and support clear ownership between 1LOD and 2LOD in risk identification, challenge, escalation, and remediation.
• Report findings to management and regulatory authorities, highlighting key risk metrics, exposures, and mitigating actions, with clear articulation of breaches, trends, emerging risks, and required management actions.
• Collaborate closely with Product, Operations, Compliance, Legal, and Technology teams to ensure that risk management considerations are integrated into business processes and decision-making, including new product approval, control design, risk tooling, and scalable operating processes.
• Independently connduct spot and derivatives risk assessments, including hedge effectiveness, basis risk, collateral sufficiency, concentration risk, and the impact of extreme market moves across linked positions.
• Support the scaling of the business by ensuring that risk methodologies, controls, reporting, and governance remain robust as volumes, client complexity, and product range increase.

What you bring

• 5+ years of experience in financial risk management, ideally in a second line of defense capacity. Experience in a derivatives trading firm or brokerage is strongly preferred, and direct derivatives/market risk experience is essential.
• Excellent analytical skills and attention to detail, with the ability to interpret complex data and identify actionable insights, and to independently test, recalculate, and challenge front-line risk metrics and product outputs.
• Good understanding of the MiFID regulatory framework (particularly derivatives) and prudential expectations relevant to investment firms offering derivatives products.
• Good knowledge of the components of a balance sheet and drivers of income, including the capital, liquidity, and P&L implications of leveraged derivatives activity.
• Ability to operate independently and navigate ambiguity.
• Effective communication and presentation skills, including the ability to challenge senior stakeholders with credible quantitative analysis and clear risk recommendations.
• Knowledge of the blockchain and virtual currency environment is preferred, with a strong understanding of crypto market structure, spot trading, derivatives products, and perpetual swaps.
• Excellent English language skills (written and verbal).

What we offer

• Challenging, high-impact work to grow your career.
• Performance driven compensation with multipliers for outsized impact and bonus programs.
• Top tier benefits to fuel your work, including supplemental health insurance, ancillary insurance, and mental health support programs.
• Lifestyle wallet - a highly flexible employer-paid benefits spending account expenses beyond traditional benefits such as wellness, childcare, learning, and more.
• Time off to recharge including company holidays, paid time off, sick time, paid volunteer time off, parental leave, and more!
• Exceptional office experience with catered meals, events, and comfortable workspaces. 
• Monthly commuter stipend to help offset in-office commuting costs.

About the team & role

We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. 

The team’s mission is to safeguard the financial stability of our trading operations. By independently challenging front-line strategies and validating complex margin models, we ensure the safe and sustainable growth of our derivatives product.

As a Derivatives Risk Oversight Lead, you will serve as a key representative of Second Line of Defense for our derivatives trading platform, leading the oversight and continuous enhancement of risk management frameworks across the derivatives product and the Bitstamp Financial Services (BFS) entity.

This role is based in our UK office, with in-person attendance expected at least 3 days per week.

At Bitstamp by Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams.

What you’ll do

• Support the Director of Risk in implementing and managing the financial risk management programs for the Bitstamp Financial Services (BFS) Entity and other parts of the Bitstamp group, with particular focus on market, product, counterparty, margin, collateral, and liquidity risks arising from spot and derivatives activities.
• Provide independent monitoring of risk exposures across financial and operational risks and escalate breaches of approved limits, with a primary emphasis on trading-related risks and scalable control design as the business grows.
• Review and validate risk models and assess exposure metrics across derivatives products and trading strategies, including independent challenge of product calculations, valuation logic, exposure metrics, and model assumptions.
• Define and periodically review margin methodologies. Independently assess the adequacy of margin and collateral practices implemented by 1LOD, including initial margin, maintenance margin, liquidation thresholds, collateral haircuts, concentration add-ons, and stressed close-out assumptions.
• Define counterparty risk framework and limits; independently monitor exposures and challenge limit utilization, concentration risk, and interconnected exposures across spot and derivatives books.
• Conduct stress testing and scenario analysis to assess the impact of adverse market conditions and extreme events on the derivatives portfolio and develop contingency plans accordingly, including the design of independent house stress scenarios and the ability to reproduce and challenge 1LOD stress calculations.
• Complete quarterly regulatory submissions required under the MiFID license, such as capital requirement calculation (ICAAP) and quantitative reporting, including prudential risk indicators.
• Build or enhance internal capital and liquidity models, taking into account new risks arising from derivatives trading within the BFS entity,, including risks related to perpetual swaps, leverage, funding mechanics, basis dislocations, liquidation events, market gaps, and stressed liquidity.
• Participate in development of key risk and early warning indicators and monitoring as well as reviews of risk appetites, including collaboration with 1LOD on defining KPI/KRI thresholds and escalation triggers (e.g., green/orange/red status).
• Establish a regular and repeatable risk assessment process covering daily monitoring, weekly and monthly deep dives, periodic model and margin review, exception tracking, and formal escalation governance.
• Collaborate with process owners to facilitate appropriate management and control of all material risks for the BFS entity, while acting as a subject-matter expert on derivatives and trading risk.
• Promote a risk-aware culture, including facilitating regulatory-required risk training, and support clear ownership between 1LOD and 2LOD in risk identification, challenge, escalation, and remediation.
• Report findings to management and regulatory authorities, highlighting key risk metrics, exposures, and mitigating actions, with clear articulation of breaches, trends, emerging risks, and required management actions.
• Collaborate closely with Product, Operations, Compliance, Legal, and Technology teams to ensure that risk management considerations are integrated into business processes and decision-making, including new product approval, control design, risk tooling, and scalable operating processes.
• Independently connduct spot and derivatives risk assessments, including hedge effectiveness, basis risk, collateral sufficiency, concentration risk, and the impact of extreme market moves across linked positions.
• Support the scaling of the business by ensuring that risk methodologies, controls, reporting, and governance remain robust as volumes, client complexity, and product range increase.

What you bring

• 5+ years of experience in financial risk management, ideally in a second line of defense capacity. Experience in a derivatives trading firm or brokerage is strongly preferred, and direct derivatives/market risk experience is essential.
• Excellent analytical skills and attention to detail, with the ability to interpret complex data and identify actionable insights, and to independently test, recalculate, and challenge front-line risk metrics and product outputs.
• Good understanding of the MiFID regulatory framework (particularly derivatives) and prudential expectations relevant to investment firms offering derivatives products.
• Good knowledge of the components of a balance sheet and drivers of income, including the capital, liquidity, and P&L implications of leveraged derivatives activity.
• Ability to operate independently and navigate ambiguity.
• Effective communication and presentation skills, including the ability to challenge senior stakeholders with credible quantitative analysis and clear risk recommendations.
• Knowledge of the blockchain and virtual currency environment is preferred, with a strong understanding of crypto market structure, spot trading, derivatives products, and perpetual swaps.
• Excellent English language skills (written and verbal).

What we offer

• Challenging, high-impact work to grow your career.
• Performance driven compensation with multipliers for outsized impact, bonus programs, and equity ownership.
• Top tier benefits to fuel your work, including supplemental health insurance, ancillary insurance, and mental health support programs.
• Lifestyle wallet - a highly flexible employer-paid benefits spending account expenses beyond traditional benefits such as wellness, childcare, learning, and more.
• Time off to recharge including company holidays, paid time off, sick time, paid volunteer time off, parental leave, and more!
• Exceptional office experience with catered meals, events, and comfortable workspaces. 
• Monthly commuter stipend to help offset in-office commuting costs.