Security Engineer, AI Vulnerability Management

Join us in building the future of finance. Our mission is to democratize finance for all. An estimated $124 trillion of assets will be inherited by younger generations in the next two decades. The largest transfer of wealth in human history. If you’re ready to be at the epicenter of this historic cultural and financial shift, keep reading. About the team + role We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. The Security Engineering team builds systems and practices that help protect Robinhood’s platform, infrastructure, and customers at scale. The team works closely with infrastructure, developer platform, and product engineering teams to reduce security risk through automation, actionable visibility, and secure-by-default tooling. Team members focus on practical engineering solutions that improve detection, remediation, and operational resilience across cloud and application environments. We value clear communication, measurable outcomes, and building systems that help engineers resolve security issues efficiently. As a Security Engineer – AI Vulnerability Management, you will help evolve Robinhood’s vulnerability management capabilities through automation, scalable tooling, and AI-assisted workflows. You will build systems that improve how vulnerabilities are discovered, prioritized, and remediated across modern cloud infrastructure and software environments. The role includes developing integrations, improving security visibility, and supporting incident response activities for high-priority vulnerabilities. You will partner with infrastructure and application engineering teams to create reliable remediation workflows that reduce manual effort while maintaining strong security standards. This role is based in our Menlo Park office, with in-person attendance expected at least 3 days per week. At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams. What you’ll do - Build and maintain automation workflows that support vulnerability discovery, prioritization, and remediation across cloud and application environments - Develop tooling and integrations that connect vulnerability findings with infrastructure context, runtime data, and threat intelligence signals - Create CI/CD guardrails and developer workflows that help prevent common security issues from reaching production systems - Support the response to high-priority vulnerabilities and zero-day events through analysis, remediation coordination, and exposure assessment - Build dashboards and reporting workflows that translate security findings into clear operational insights for engineering teams and leadership What you bring - 3+ years of experience in security engineering, infrastructure security, or security automation roles - Proficiency in Python or Go, including experience building scalable internal tools, APIs, or automation workflows - Experience working with AWS, Kubernetes, or modern cloud-native infrastructure environments - Familiarity with vulnerability management concepts, including CVSS, exploitability analysis, and remediation prioritization - Experience using security tooling such as Snyk, Semgrep, Wiz, EndorLabs, or TruffleHog This position is restricted to US citizens or lawful permanent residents due to legal requirements. What we offer - Challenging, high-impact work to grow your career. - Performance-driven compensation with multipliers for outsized impact, bonus programs, equity ownership, and 401(k) matching. - Best-in-class benefits to fuel your work, including 100% paid health insurance for employees with 90% coverage for dependents. - Lifestyle wallet — a highly flexible benefits spending account for wellness, learning, and more. - Employer-paid life & disability insurance, fertility benefits, and mental health benefits. - Time off to recharge including company holidays, paid time off, sick time, parental leave, and more! - Exceptional office experience with catered meals, events, and comfortable workspaces. In addition to the base pay range listed below, this role is also eligible for bonus opportunities + equity + benefits. Base pay for the successful applicant will depend on a variety of job-related factors, which may include education, training, experience, location, business needs, or market demands. The expected base pay range for this role is based on the location where the work will be performed and is aligned to one of

3+ years of experience in security engineering, infrastructure security, or security automation roles. Proficiency in Python or Go, including experience building scalable internal tools, APIs, or automation workflows. Experience working with AWS, Kubernetes, or modern cloud-native infrastructure environments. Familiarity with vulnerability management concepts, including CVSS, exploitability analysis, and remediation prioritization. Experience using security tooling such as Snyk, Semgrep, Wiz, EndorLabs, or TruffleHog.