Senior Security Engineer Detection and Response

Salary: £36,000 - 48,000 per year

Requirements:

• 10+ years across security engineering, Infosec, IT, infrastructure/SRE, and/or incident response.
• 7+ years specifically in detection or response, with experience building detections, automation, or security tooling.
• Comfortable writing and reviewing production-quality code and building automations, integrations, and data pipelines.
• Proven ability to work independently in satellite offices or distributed teams.
• Extensive experience operating as an incident commander.
• Expert-level capability investigating threats in enterprise and production environments from identification to resolution.
• Deep understanding of security tooling such as SIEM, EDR, IDS/IPS, NDR, and SOAR, with experience extending or building on it.
• Proficiency applying incident response frameworks such as NIST IR Lifecycle, Cyber Kill Chain, and MITRE ATT&CK.
• Experience across public cloud, operating systems, virtualization, containerization, networking, build/development infrastructure, and hardware.
• Bachelors degree in Computer Science, Cybersecurity, or a related technical field; advanced degree preferred or equivalent experience.

Responsibilities:

• Design, write, and maintain production-quality detections, automations, and integrations that scale our monitoring capability and reduce manual toil.
• Develop and improve the tooling our global SIRT/SOC depends on for alert quality, enrichment, case-management integrations, and automation.
• Act as the primary incident commander for the European time zone and make critical, time-sensitive decisions independently.
• Serve as the senior-most security engineering point of contact in the region.
• Shape the technical direction of our detection and response engineering function.
• Architect and optimize global hand-offs and follow-the-sun models.
• Ensure serious threats and impacts are understood, mitigated, and learned from with speed and professionalism.
• Lead responses end-to-end without immediate escalation paths during local hours and turn findings into durable, automated detections.
• Investigate complex context to determine whether threats exist and proactively hunt for anomalous activity in our signals.
• Collaborate with Security and Engineering to lead responses to major vulnerabilities or platform-wide events.
• Work with Legal, HR, Executive teams, and external partners, including developers and customers.
• Travel semi-regularly to the USA to visit HQ and ensure alignment with central engineering and security leadership.

Technologies:

• Architect
• Cloud
• Hardware
• Security
• 3D
• Support
• Office 365

More:

We are Roblox, building the tools and platform that empower our global community of developers and creators to bring any experience they can imagine to life. Our mission is to connect a billion people with optimism and civility, and this role sits within our Security Operations team in EMEA at an exciting time in our SIRT & SOC program. This is a highly autonomous founding role based in London, UK, working from a dedicated private space within a shared office environment. We value engineering-led solutions, automation, orchestration, detections-as-code, and risk-based prioritization. Roles based in an office are onsite Tuesday, Wednesday, and Thursday, with optional presence on Monday and Friday unless otherwise noted. We provide equal employment opportunities and reasonable accommodations to candidates with qualifying disabilities or religious beliefs during the recruiting process.

last updated 36 week of 2026