Staff Software Developer, Security

The Detection and Response Platform team protects the security and privacy of Robinhood and its customers through rapid detection, response, and containment of cybersecurity threats and using lessons learned from incidents to inform continuous improvement of security controls.

Join a team committed to developing a robust detection and response platform that empowers the operations team to implement detections within the Robinhood environment. We innovate and engineer scalable detection solutions, enabling teams to build and operate securely. By collaborating across product and platform engineering, you'll drive impactful solutions that seamlessly integrate detection data sources into the development lifecycle. If you're passionate about solving real-world detection platform challenges with cutting-edge technology, this is the team for you.

The role is located in the office location(s) listed on this job description which will align with our in-office working environment. Please connect with your recruiter for more information regarding our in-office philosophy and expectations.

• Design and build scalable distributed systems that enable real-time detection and response.
• Develop and operate high-volume data pipelines that ingest and enrich telemetry from applications, cloud infrastructure, and endpoints.
• Deploy and manage runtime monitoring sensors (e.g., eBPF-based probes) for kernel-level telemetry and visibility.
• Partner with Security Operations and Platform teams to translate detection needs into durable platform capabilities and APIs.
• Lead technical design reviews and define standards for data modeling, scalability, and observability.
• Build automation and orchestration tooling to streamline triage and response workflows.
• Continuously improve signal fidelity, system performance, and team efficiency.
• Mentor engineers, drive cross-functional initiatives, and influence detection platform strategy.
  

• 8+ years of software engineering experience, including 5+ years designing and operating large-scale distributed systems.
• Proficiency in Go or Python, with strong debugging and performance tuning skills.
• Experience with streaming and data processing systems (Kafka, Databricks/Spark, Vector.dev) and storage engines (Falcon Logscale, Splunk).
• Hands-on experience with eBPF, Tetragon, Falco, Sysmon, auditd, or similar runtime monitoring tools.
• Familiarity with security detection and response systems and telemetry workflows.
• Understanding of cloud-native infrastructure (AWS, GCP, Azure), Kubernetes, and Infrastructure as Code (Terraform).
• Demonstrated technical leadership—mentoring engineers, shaping roadmaps, and delivering complex, high-impact projects.
• Strong communication and collaboration skills across Security, Platform, and Infrastructure teams.
• Preferred experience building security platforms (SIEM, SOAR, or custom D&R tooling).
• Preferred familiarity with regulated environments (e.g., SOX, SOC 2, FINRA).
• Contributions to open-source observability or eBPF tooling.

Our team is committed to providing an inclusive and welcoming interview experience for all candidates. If you require a specific accommodation during the application or interview process due to a physical or mental condition, please complete this Applicant Accommodation Form to notify our team. The form should only be completed if you need a specific accommodation.