Senior Security Engineer, Detection & Response

Robinhood is seeking a Senior Security Engineer (IC5) for its Detection & Response team. In this hybrid role based in Bellevue, WA, you will lead incident response strategy, raise the quality bar for detection engineering, and help evolve the AI-agentic direction of SecOps.

You will command complex, high-stress security events, build and maintain a global detection catalog for cloud and Kubernetes environments, and work toward an Autonomic Security Operations roadmap that integrates AI agents and automated issue discovery. The position also involves reading and reasoning through multi-language codebases to identify vulnerabilities and guide remediation.

Key Responsibilities

• Lead incident response workstreams with decisive direction, rapidly containing threats, quantifying impact, and communicating effectively with leadership.
• Build, tune, and maintain a global detection catalog covering cloud and Kubernetes environments to deliver high precision and actionable alerts.
• Architect the Autonomic Security Operations (ASO) roadmap, integrating AI agents and automated issue discovery to improve response capabilities.
• Read and reason through complex, multi-language codebases to identify vulnerabilities, assess threat vectors, and support remediation.
• Join an on-call rotation (one week per rotation) to maintain real-time operational readiness.

Requirements

• 5+ years of experience in Detection & Response, Incident Response, or Security Operations.
• Proven ability to lead complex incident responses under pressure, with clear, action-oriented executive communication.
• Advanced experience securing cloud environments, with a focus on Kubernetes.
• Fluency reading, analyzing, and reasoning through code across multiple programming languages to solve complex security problems.
• Experience designing, tuning, and operating scalable detection engineering pipelines and SOAR playbooks, including leveraging AI to improve speed, scale, and quality.
• Hands-on experience designing and implementing agentic AI workflows for security operations.
• Ability to thrive in a high-growth, fast-paced environment with evolving threat landscapes.

Technologies

• Kubernetes
• SOAR

Bonus Points

• Hands-on experience with Threat Hunting, Threat Intelligence, Vulnerability Management, or Red Team operations.
• Experience in high-growth fintech, crypto platforms, or managed security service providers.
• Familiarity with DeFi/crypto, blockchain, and related technologies.

Compensation & Benefits

• Salary: USD 187,000 - 220,000 per year.
• Performance-driven compensation with multipliers for outsized impact, plus bonus programs and equity ownership.
• 401(k) matching.
• Health insurance: 100% paid for employees, with 90% coverage for dependents.
• Lifestyle wallet: a flexible benefits spending account for wellness, learning, and more.
• Employer-paid life & disability insurance, fertility benefits, and mental health benefits.
• Time off including company holidays, paid time off, sick time, parental leave, and more.
• Office experience with catered meals, events, and comfortable workspaces.

About the Role

This role is based in Robinhood office(s) in Bellevue, WA, Menlo Park, CA, and Denver, CO, with in-person attendance expected at least 3 days per week. As a Senior Security Engineer (IC5) on Detection & Response, you will drive incident response strategy and build robust detection engineering frameworks, partnering with Proactive Security, Security Engineering, Insider Trust, Infrastructure, Legal, and Communications.