Senior Security Engineer, Detection & Response
Bellevue, WA · Denver · Menlo Park · 5+ years experience · Posted Sep 21, 2026
At a glance
- Experience
- 5+ years experience
- Location
- Bellevue, WA · Denver · Menlo Park
About the role
- As a Senior Security Engineer (IC5) on the Detection & Response team, you will drive our incident response strategy and build robust detection engineering frameworks.
- In this high-impact role, you will command high-stress incident responses, eliminate operational noise by developing an AI-native detection platform, and help shape the broader AI-agentic ecosystem for SecOps.
- You will work closely with cross-functional partners in Proactive Security, Security Engineering, Insider Trust, Infrastructure, Legal, and Communications to protect Robinhood’s ecosystem.
Responsibilities
- Lead Incident Response: Command security incident response workstreams with decisive leadership, rapidly containing threats, quantifying impact, and communicating effectively with leadership.
- Elevate Detection Rigor: Build, tune, and maintain our global detection catalog across our cloud and kubernetes environments to ensure high precision and actionable alerting.
- Drive Strategic Innovation: Architect our Autonomic Security Operations (ASO) roadmap, integrating AI agents and automated issue discovery to transform response capabilities.
- Code & Architecture Analysis: Read and reason through complex, multi-language codebases to identify security vulnerabilities, evaluate threat vectors, and guide remediation.
- On-Call Support: Participate in an on-call rotation (1 week per rotation) to maintain real-time operational readiness.
Requirements
- 5+ years of experience in Detection & Response, Incident Response, or Security Operations.
- Proven Command Presence: Demonstrated success leading complex incident responses under pressure with clear, action-oriented executive communication.
- Deep Cloud & Infrastructure Expertise: Advanced technical experience securing cloud environments with a focus on Kubernetes.
- Code Reasoning Skills: Ability to fluently read, analyze, and reason through code across multiple programming languages to solve complex security challenges.
- Detection Engineering Mastery: Track record of designing, tuning, and operating scalable detection engineering pipelines and SOAR playbooks, as well as leveraging AI technologies to improve speed, scale, and quality.
- AI Experience: Hands-on experience designing and implementing agentic AI workflows for security operations.
- Agility: Ability to thrive in high-growth, fast-paced environments with evolving threat landscapes.
Preferred qualifications
- Hands-on experience with Threat Hunting, Threat Intelligence, Vulnerability Management, or Red Team operations.
- Background in high-growth fintech, crypto platforms, or managed security service providers.
- Familiarity with DeFi/crypto, blockchain, and related technologies.
Benefits
- Performance-driven compensation with multipliers for outsized impact, bonus programs, equity ownership, and 401(k) matching.
- 100% paid health insurance for employees with 90% coverage for dependents.
- Lifestyle wallet — a highly flexible benefits spending account for wellness, learning, and more.
- Employer-paid life & disability insurance, fertility benefits, and mental health benefits.
- Time off to recharge including company holidays, paid time off, sick time, parental leave, and more!
- Exceptional office experience with catered meals, events, and comfortable workspaces.
Workplace
- This role is based in our Bellevue, WA, Menlo Park, CA, and Denver, CO office(s), with in-person attendance expected at least 3 days per week.
Skills
- Kubernetes
- SOAR
- Threat Hunting
- Threat Intelligence
- Vulnerability Management
- Red Team
- DeFi
- Crypto
- Blockchain