Hashtag Web3 Logo
Robinhood logo

Staff Offensive Security Engineer

Robinhood
Bellevue, WA; Denver, CO; Menlo Park, CA; New York, NY$217k – $255k/yrPosted 239 days ago
Apply

Join us in building the future of finance.

Our mission is to democratize finance for all. An estimated $124 trillion of assets will be inherited by younger generations in the next two decades. The largest transfer of wealth in human history. If you're ready to be at the epicenter of this historic cultural and financial shift, keep reading.

About the team + role

This role is based in our Bellevue, WA, New York, NY, or Menlo Park, CA office(s), with in-person attendance expected at least 3 days per week.

Key Responsibilities

  • Evangelize the Offensive Security Team's Findings and Projects with stakeholders throughout the company and collaborate with other teams to create solutions that balance security with other priorities.
  • Mentor and provide guidance to the members of the Offensive Security team.
  • Plan and execute red team exercises, including long-term assessments that simulate real-world attack scenarios
  • Perform threat modeling and penetration testing across applications, infrastructure, and corporate environments
  • Develop scripts and tools to support and automate security testing activities
  • Partner with detection and response teams to run adversarial simulations and improve incident readiness
  • Communicate findings clearly and work with engineering teams to remediate identified risks
  • Lead Security Incidents when Pentest or Red Team findings require them.
  • Plan and participate in Adversarial Simulation exercises with various security teams.

Candidate Profile & Mindset

  • 8+ years of experience conducting red team operations or advanced penetration testing
  • Experience mentoring or supporting the development of other security engineers
  • Passion and demonstrated experience for challenging security assumptions.
  • Excellent written and verbal communication skills and ability to communicate your findings at many different levels of abstraction from Engineers to Executives.
  • Passion for fixing security issues and not just identifying security issues.
  • Familiarity with common network protocols and standards such as DNS and TCP/IP.
  • Experience with MacOS and Linux.
  • Experience with leveraging components of a modern software development stack to attack companies, including CI, container orchestration systems (Kubernetes/Docker), cloud providers (AWS, GCP), etc and be able to give hardening suggestions.
  • Experience/knowledge of defensive tools/techniques (IDS/IPS, Packet Capture, Network Analysis, AV, EDR, etc.) and how to evade them.
  • Deep understanding of Mitre's ATT&CK Framework.
  • Strong understanding of the security fundamentals of access and identity.
  • Comfortable reading / writing python, go, and javascript.
  • Ability to research and execute a testing plan to access a new technology or process.
  • Demonstrated experience working with a distributed team.
  • Proficiency to communicate over a text-based medium (Slack, JIRA Issues, GitHub issues, & Email) and can succinctly document technical details.

Preferred / Nice-to-Have Qualifications

  • Experience in the Financial Technology domain.
  • Experience being a technical lead at other organizations.

Perks & Compensation

  • Market competitive and pay equity-focused compensation structure
  • 100% paid health insurance for employees with 90% coverage for dependents
  • Annual lifestyle wallet for personal wellness, learning and development, and more!
  • Lifetime maximum benefit for family forming and fertility benefits
  • Dedicated mental health support for employees and eligible dependents
  • Generous time away including company holidays, paid time off, sick time, parental leave, and more!
  • Lively office environment with catered meals, fully stocked kitchens, and geo-specific commuter benefits In addition to the base pay range listed below, this role is also eligible for bonus opportunities + equity + benefits.

Base pay for the successful applicant will depend on a variety of job-related factors, which may include education, training, experience, location, business needs, or market demands. The expected base pay range for this role is based on the location where the work will be performed and is aligned to one of 3 compensation zones. For other locations not listed, compensation can be discussed with your recruiter during the interview process.

Base Pay Range

Zone 1 (Menlo Park, CA; New York, NY; Bellevue, WA; Washington, DC) $217,000 - $255,000 USD Zone 2 (Denver, CO; Westlake, TX; Chicago, IL) $190,000 - $224,000 USD Zone 3 (Lake Mary, FL; Clearwater, FL; Gainesville, FL) $169,000 - $199,000 USD Click here to learn more about our Total Rewards, which vary by region and entity.

If our mission energizes you and you're ready to build the future of finance, we look forward to seeing your application.

Robinhood provides equal opportunity for all applicants, offers reasonable accommodations upon request, and complies with applicable equal employment and privacy laws. Inclusion is built into how we hire and work - welcoming different backgrounds, perspectives, and experiences so everyone can do their best. Please review the Privacy Policy for your country of application.

About Robinhood

Robinhood, founded in 2013 by Vlad Tenev and Baiju Bhatt in Menlo Park, pioneered commission-free trading for 23M+ funded customers across equities, options, crypto and retirement. Public since 2021 (NASDAQ: HOOD), it expanded into crypto wallets, 24-hour trading and credit products. In Web3, Robinhood offers in-app crypto trading, self-custody wallet and learning rewards. The company values simple, trustworthy product design and responsible access to markets. Robinhood Crypto enables millions of retail investors to trade digital assets seamlessly with zero commission, self-custody wallet connectivity, and regulatory transparency. Robinhood Crypto continues expanding its digital asset ecosystem, introducing staking rewards, international trading availability, and robust wallet security.