Staff Security Engineer, Detection & Response

As a Staff Security Engineer on Robinhood's Detection & Response team, you will drive incident response strategy, build robust detection engineering frameworks, and mentor engineers across the organization. You command high-stress incident responses, eliminate operational noise by developing an AI-native detection platform, and help shape the broader AI-agentic ecosystem for SecOps. You work closely with cross-functional partners in Proactive Security, Security Engineering, Insider Trust, Infrastructure, Legal, and Communications to protect Robinhood's ecosystem.

What you'll do

• Lead security incident response workstreams with decisive leadership, rapidly containing threats, quantifying impact, and communicating effectively with leadership.
• Build, tune, and maintain the global detection catalog across cloud and Kubernetes environments to ensure high precision and actionable alerting.
• Architect the Autonomic Security Operations (ASO) roadmap, integrating AI agents and automated issue discovery to transform response capabilities.
• Read and reason through complex, multi-language codebases to identify security vulnerabilities, evaluate threat vectors, and guide remediation.
• Mentor engineers across the team, fostering a culture of technical excellence, trust, and continuous learning.
• Participate in an on-call rotation (1 week per rotation) to maintain real-time operational readiness.

What you bring

• 8+ years of experience in Detection & Response, Incident Response, or Security Operations.
• Proven ability to lead complex incident responses under pressure with clear, action-oriented executive communication.
• Advanced technical experience securing cloud environments with a focus on Kubernetes.
• Ability to fluently read, analyze, and reason through code across multiple programming languages to solve complex security challenges.
• Track record of designing, tuning, and operating scalable detection engineering pipelines and SOAR playbooks, and leveraging AI technologies to improve speed, scale, and quality.
• Hands-on experience designing and implementing agentic AI workflows for security operations.
• Ability to thrive in high-growth, fast-paced environments with evolving threat landscapes.

Nice to have

• Hands-on experience with Threat Hunting, Threat Intelligence, Vulnerability Management, or Red Team operations.
• Background in high-growth fintech, crypto platforms, or managed security service providers.
• Familiarity with DeFi, crypto, blockchain, and related technologies.

What we offer

• Base pay of $217,000-$255,000 USD (Zone 1: Menlo Park, CA; New York, NY; Bellevue, WA; Washington, DC), $190,000-$224,000 USD (Zone 2: Denver, CO; Westlake, TX; Chicago, IL), or $169,000-$199,000 USD (Zone 3: Lake Mary, FL; Clearwater, FL; Gainesville, FL), depending on location and role factors.
• Bonus opportunities and equity ownership.
• 100% paid health insurance for employees with 90% coverage for dependents.
• Lifestyle wallet, a flexible benefits spending account for wellness, learning, and more.
• Employer-paid life and disability insurance, fertility benefits, and mental health benefits.
• Paid time off, company holidays, sick time, parental leave, and more.
• 401(k) matching.
• Catered meals, events, and comfortable workspaces in office locations.

About Robinhood

Robinhood's mission is to democratize finance for all. The Security Operations team proactively safeguards the platform and millions of customers by monitoring, detecting, and responding to security threats in real time while staying ahead of risks through threat intelligence, Red Team operations, and research partnerships.