About the team + role

We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. 

The Threat Intelligence team reduces organizational risk by rapidly detecting, understanding, and disrupting adversary activity. We research criminal ecosystems targeting our brand, customers, and infrastructure, and work with partners to translate that intelligence into detections, controls, and customer protections. Our work enables Security, Engineering, Trust & Safety, and executive leaders to focus resources where risk is highest. We operate with a strong sense of ownership, clear communication, and a commitment to protecting customers so they can confidently participate in the financial system!

As a Staff Security Analyst, Threat Intelligence, you will operate at the forefront of advanced and evolving threats targeting Robinhood and our customers. You will actively hunt for emerging phishing, scam, impersonation, fraud, and infrastructure abuse campaigns while building scalable systems that turn intelligence into action. This role combines hands-on investigation, program design, mentorship, and stakeholder engagement. Your work will shape proactive controls, influence product and security decisions, and strengthen our overall threat defense strategy.

This role is based in our Toronto, Canada office(s), with in-person attendance expected at least 3 days per week. 

At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams.

What you’ll do

• Proactively hunt and map criminal ecosystems targeting Robinhood and its customers, then translate intelligence into scalable systems and coordinated defenses that disrupt adversaries before they cause harm.
• Build and operationalize a comprehensive “Universe of Threats” by identifying, tracking, and prioritizing adversaries across phishing, scams, impersonation, fraud, and infrastructure abuse.
• Establish and mature a proactive threat intelligence lifecycle by developing industry partnerships, collaborating with trusted peers and federal authorities, and cultivating online personas to generate early warning capabilities that protect Robinhood’s business operations.
• Investigate attacker infrastructure across domains, DNS, certificate transparency logs, cloud providers, and telecom platforms, and convert findings into concrete detections, controls, and customer protections.
• Coordinate threat actor infrastructure takedowns with hosting providers, domain registrars, cloud platforms, and other infrastructure partners to disrupt adversary operations at scale.
• Design and automate intelligence workflows using OSINT tooling, enrichment pipelines, data analysis tools, and case management systems to scale analysis and reporting.
• Partner directly with Detection & Response, Automation, Customer Trust & Safety (Fraud and Financial Crimes), Security Engineering, Corporate Security, Risk, and executive leaders to prioritize threats based on measurable business risk.

What you bring

• 8–12+ years of total experience, including 3–5+ years operating at a senior or staff-level scope in threat intelligence, brand protection, or cyber investigations.
• Hands-on experience tracking criminal ecosystems tied to phishing, scams, impersonation, fraud, and infrastructure abuse, and the ability to move from isolated indicators to campaign- and actor-level analysis.
• Deep familiarity with domain registration patterns, DNS and certificate transparency analysis, cloud and hosting abuse across providers (e.g., AWS, GCP, Azure, VPS), and attacker monetization methods.
• Experience using OSINT tooling, SQL, Python, notebooks, SIEM or SOAR platforms, OpenCTI, and case management systems to analyze data and automate workflows.
• Ability to translate complex technical threats into clear business risk for technical teams and executive audiences through strong written and verbal communication.
• Experience mentoring others or leading initiatives across teams, with a high level of accountability and sound risk judgment in ambiguous situations.

Nice to have

• Experience with crypto investigations or on-chain analysis.
• Background in highly regulated industries such as fintech, financial services, payments, crypto, healthcare, or government.

About the team + role

We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. 

The Red Team team’s mission is to proactively identify and simulate real-world threats against Robinhood’s platforms, properties, and people. Through red teaming and adversarial simulations, the team evaluates security controls, uncovers vulnerabilities, and helps continuously strengthen Robinhood’s overall security posture in close partnership with Detection & Response, Physical Security, and Engineering.

As a Staff Offensive Security Engineer, you will take a hands-on role in designing and executing stealthy adversarial simulations to validate assumptions and uncover gaps in detection and response. You’ll leverage threat modeling, penetration testing, and research-driven techniques to emulate sophisticated attackers, while collaborating cross-functionally to improve defenses and shape more secure systems.

This role is based in our Toronto, Canada office(s), with in-person attendance expected at least 3 days per week. 

At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams.

What you’ll do

• Plan and execute red team operations, adversarial simulations, and penetration tests across applications, infrastructure, networks, offices, and internal processes.
• Perform threat modeling for new and existing services, clearly articulating security risks and tradeoffs to engineering and risk stakeholders.
• Conduct vulnerability research, exploit development, and testing using both custom tooling and public proof-of-concept techniques.
• Partner with detection and response teams to simulate realistic attack scenarios and evaluate monitoring and incident response readiness.
• Write and maintain tooling to automate and scale offensive security assessments.
• Serve as a subject matter expert by documenting findings, recommending remediation strategies, and supporting teams through fixes.
• Mentor teammates and contribute to shared knowledge through internal documentation, presentations, and external talks or blog posts.

What you bring

• 8+ years of hands-on experience in red teaming, offensive security, or penetration testing.
• Demonstrated experience mentoring or guiding other security engineers.
• Strong understanding of threat modeling methodologies and the MITRE ATT&CK framework.
• Experience testing modern environments, including cloud platforms (AWS, GCP), containerized systems (Docker, Kubernetes), CI pipelines, and identity systems.
• Working knowledge of defensive security tools such as IDS/IPS, EDR, packet capture, and network monitoring, including common evasion techniques.
• Proficiency in Python, Go, or JavaScript for exploit development, tooling, or automation.
• Clear written and verbal communication skills, with the ability to explain technical findings to both engineers and senior leaders.
• Experience collaborating with distributed teams and documenting work through tools such as Slack, Jira, GitHub, and email.

Bonus points:

• Experience working in financial technology or regulated environments.
• Prior experience serving as a technical lead on security initiatives.

What we offer

• Challenging, high-impact work to grow your career
• Performance driven compensation with multipliers for outsized impact, bonus programs, and equity ownership
• Top tier benefits to fuel your work, including supplemental health insurance, ancillary insurance, and mental health support programs
• Lifestyle wallet - a highly flexible employer-paid benefits spending account expenses beyond traditional benefits such as wellness, childcare, learning, and more.
• Time off to recharge including company holidays, paid time off, sick time, paid volunteer time off, parental leave, and more!
• Exceptional office experience with catered meals, events, and comfortable workspaces. 
• Monthly commuter stipend to help offset in-office commuting costs

Our team is committed to providing an inclusive and welcoming interview experience for all candidates. If you require a specific accommodation during the application or interview process due to a physical or mental condition, please complete this Applicant Accommodation Form to notify our team. The form should only be completed if you need a specific accommodation.

AI Usage Disclosure: Robinhood uses artificial intelligence (AI) tools to support parts of our recruiting process. These tools enhance the efficiency and consistency of our hiring process; however, all hiring decisions are made by our hiring teams.

Vacancy Notice: This job posting represents an existing vacancy that we are actively seeking to fill.

This is a work-from-office / In-Office role based in our Hyderabad, India location.

Plume develops and deploys cloud based control planes with scale to manage tens of millions of customer homes through some of the world’s largest Internet Service Providers. Our cloud applications include WiFi network management and optimization, device access control, network provisioning, IoT security, and end customer user interaction through mobile apps. 

The Opportunity:

Plume is hiring a security engineer to join the security team to help protect and drive the Plume mission. As a highly visible and dynamic organization, we must value and guard against damage to our internal information, our platforms, and our reputation and brand. Finally, it is paramount that we defend against loss of control or confidence in our systems, to guarantee the highest probability of success.

As a Sr. Security Vulnerability Engineer, you will focus on the technologies that ensure our networks and systems are up to industry and Plume security standards. This role will partner with various engineering, IT and stakeholder groups across Plume to ensure that the technologies and systems we build in-house or purchase are protected in a secure way that minimizes risk.

What you will do:

1. Establish a process to detect, track, prioritize, and report vulnerabilities on organizational information systems
2. Own End to End Vulnerability program, move the area into SOAR as needed.
3. Coordinate with SOC/MSSP on vulnerability triage and detection rules/alerts, coordinate mitigation efforts, and report progress
4. Identify critical flaws in applications and systems that cyber attackers could exploit
5. Conduct vulnerability assessments for networks, applications and operating systems
6. Conduct network security audits and scanning on a predetermined basis
7. Use Crowdstrike, DAST, SAST, Rapid7 to pinpoint vulnerabilities and reduce time-consuming tasks
8. Use refinement techniques to gain understanding to reduce false positives.
9. Compile and track vulnerabilities over time for metrics purposes
10. Serve as advisor to engineering and dev teams in security best practices and design.
11. Work with security and IT teams to identify threats and problem areas and create stronger and safer software and application deployments across Plume, measuring decreased risk and prevalence of issues.

Who you are: 

• Must be a Senior level person and have HANDS-ON experience as the person responsible for overseeing vulnerability Programs
• Bachelor's degree in Information Security, Computer Science or related field or equivalent work experience
• 5+ years of professional experience in vulnerability management with an education in security or other STEM discipline; 
• Experience with either Crowdstrike, Rapid7, other EDR , MDM, XDR or SIEM
• Experience with scripting in Python, Shell, Go, Javascript and ability to read APIs
• Expertise with Mac and Linux operating systems
• Understand AWS and GCP cloud resource vulnerabilities.
• Strong communication, written, presentation and interpersonal skills
• Proven ability to work unsupervised, exercise leadership, and influence change.
• You operate effectively across teams and disciplines even in highly ambiguous situations with a rack record of getting things done quickly and with quality

Full-time position
Hybrid role, 3 days a week in our Ljubljana, Slovenia office. 

Life at Plume

At Plume, we believe that technology isn't about moving faster; it's about making life’s moments better. Which is why we’ve built the world's first and only open and hardware-independent service delivery platform for smart homes, small businesses, enterprises, and beyond. Our SaaS platform uses WiFi, advanced AI, and machine learning to create the future of connected spaces—and human experiences—at a massive scale.

We now deliver services to over 60 million locations globally and have managed over 3 billion devices on our platform. We’re expanding rapidly, pioneering a new category, and we achieved our Series F funding in just four years. Our customers include many of the world's largest Internet Service Providers (ISPs) who look to Plume to help them evolve their smart home offerings while gleaning insights from their own data. 

With a bias for action and a love for being trailblazers, the team at Plume embodies a combination of relentless curiosity and imaginative innovation. We challenge ourselves to think in ways that other companies don't, work to do what should be done (rather than what can), and if we can’t do it exceptionally well, we don’t do it. It’s how we've assembled a team of world-class builders, thinkers, and doers. And it’s how we’re reinventing what’s possible every day.

Senior Technical Program Manager

We're looking for a Senior Technical Program Manager to take the wheel on some of our most exciting and high-impact initiatives - spanning automation, AI, and CI/CD. You'll be the connective tissue across engineering teams, making sure the right things get built, shipped, and measured.

This isn't a role for someone who likes to stay in the background. You'll drive clarity in ambiguous situations, call out blockers before they become fires, and help teams move faster without cutting corners.

Responsibilities

Program Management & Execution

• Own end-to-end planning, tracking, and delivery of programs across automation, AI, and CI/CD domains.
• Define and maintain program roadmaps, milestones, dependencies, and success metrics.
• Run crisp, efficient rituals (standups, reviews, retrospectives) that actually move things forward.
• Proactively surface risks and drive mitigation plans before issues escalate.

CI/CD & Automation

• Partner with engineering teams to track and accelerate initiatives that improve CI/CD pipelines, release velocity, and deployment reliability.
• Champion automation-first thinking across the SDLC — from testing and build pipelines to monitoring and incident response.
• Measure and report on pipeline health, lead time, and deployment frequency.

AI Initiatives

• Manage programs introducing AI-driven tools and workflows into engineering processes.
• Track adoption and impact of AI-enabled development tools and automation frameworks.
• Coordinate cross-team integration of AI technologies into engineering platforms.

Cross-Functional Leadership

• Serve as the primary point of coordination across engineering, product, SRE, and leadership stakeholders.
• Build strong working relationships across time zones and disciplines — you know how to get alignment without being the bottleneck.
• Communicate program status clearly and confidently to both technical and non-technical audiences.
• Drive a culture of accountability, transparency, and continuous improvement.

Qualifications

• 5+ years of experience in technical program management, with a track record of delivering complex, cross-functional programs.
• Deep Jira expertise, including project configuration, custom workflows, dashboards, and advanced JQL querying, with the ability to leverage Jira data (velocity trends, cycle time, sprint burndown) to drive decisions and proactively identify risks such as scope creep.
• Proven experience driving end-to-end Agile delivery for technical programs, including facilitating sprint planning (capacity planning, backlog refinement, story estimation), daily stand-ups, sprint reviews, and retrospectives that translate into measurable improvements across automation, AI, and CI/CD initiatives.
• Excellent written and verbal communication skills in English, with the ability to adapt messaging appropriately for different audiences, from senior executives to technical stakeholders such as staff engineers.
• Strong project management skills with the ability to bring structure and clarity to complex initiatives, maintain a high level of attention to detail, and consistently deliver outcomes within defined timelines.

Bonus points if you have:

• Experience in SaaS, networking, or connected devices.
• Familiarity with agile and scaled agile frameworks.
• Background working across globally distributed teams.
• Strong grasp of CI/CD concepts, DevOps practices, and the software development lifecycle.
• Hands-on experience managing AI or data-driven initiatives (you don't need to write the models, but you need to understand the landscape).

Why Plume

• Work on technology that reaches millions of real people in their homes every day.
• Hybrid flexibility — we believe in in-person collaboration and personal autonomy.
• A culture that values directness, curiosity, and getting things done.
• Competitive compensation, equity, and benefits.