Senior Security Operations Engineer

Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences– all created by our global community of developers and creators. At Roblox, we’re building the tools and platform that empower our community to bring any experience that they can imagine to life. Our vision is to reimagine the way people come together, from anywhere in the world, and on any device. We’re on a mission to connect a billion people with optimism and civility, and looking for amazing talent to help us get there. A career at Roblox means you’ll be working to shape the future of human interaction, solving unique technical challenges at scale, and helping to create safer, more civil shared experiences for everyone. As a founding member of the Security Operations team in EMEA, you will be joining us at an exciting time in Roblox’s SIRT & SOC program. This is a highly autonomous role where you will be a primary decision-maker, core to our mission to maintain a highly capable 24/7/365 monitoring and response capability. While you will work in close collaboration with peers at our US West Coast Headquarters, the nature of the time difference requires a leader who can operate independently, making critical decisions without immediate oversight. You will help scale our ability to monitor and protect players, developers, employees, and the platform globally. We favor automation, orchestration, and risk-based prioritization, while retaining the deep technical skills required to conduct detailed, hands-on analysis and response when the situation warrants. Work Environment: This role is based in London, UK. You will be working from a dedicated, private space located within a shared office environment, designed to enable collaboration while remaining secure. You will: Exercise High Autonomy: Act as the primary Incident Commander for the European time zone, making critical, time-sensitive decisions independently before US HQ comes online. You will serve as the senior-most security operations point of contact in the region. Command Security Incidents: Ensure serious threats and impacts are understood, mitigated, and learned from with speed and professionalism, often leading responses end-to-end without immediate escalation paths during local hours. Drive Strategy & Operations: Go beyond individual contribution to shape the strategic direction of the SIRT/SOC function, specifically identifying how global hand-offs and "follow-the-sun" models can be optimized. Conduct Advanced Investigations: Dig into complex context, determining if threats exist and taking decisive action to prevent them. Collaborate Cross-Functionally: Work with Legal, HR, Executive teams, and external partners (Developers & Customers). You will also travel semi-regularly to the USA to visit HQ, ensuring deep alignment with central engineering and security leadership. Lead High-Profile Responses: Collaborate with Security and Engineering to lead responses to major vulnerabilities or platform-wide events. Build & Automate: Produce and refine security response procedures (runbooks, IRPs, workflows) with a focus on automation to reduce manual toil. Threat Hunt: Proactively hunt for anomalous activity in our signals, distinguishing between outliers and threats. You have: Experience: 10+ years of experience across Infosec, IT, Infra/SRE, and/or Incident Response. Specialization: 7+ years of experience specifically in Detection or Response (& Incident Response) roles. Autonomous Leadership: Proven ability to work independently in satellite offices or distributed teams. You are comfortable being the "person in charge" during your shift and making calls that impact the business. Incident Command: Extensive experience operating as an incident commander. You can flex into deep engineering work but also possess the executive presence to coordinate responders and communicate status to leadership. Investigations: Expert-level capabi