Strategic Overview
Offensive Security Engineer at Robinhood is defined by the responsibilities and candidate requirements in the employer's listing.
The published role emphasizes work such as Collaborate with the Offensive Security team and stakeholders across the company to identify security risks and develop solutions that balance security with business priorities.
The role is listed for Bellevue, WA, giving candidates the practical context needed to assess fit before applying.
Key information at a glance
About This Role
We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do.
The Offensive Security’s mission is to identify and reduce real-world security risks across Robinhood by simulating adversary behavior and testing defenses. As an Offensive Security Engineer, you will plan and execute security assessments across applications, infrastructure, and physical environments, and partner closely with engineering and security teams to strengthen detection and response capabilities.
This role is based in our Bellevue, WA, New York, NY, Denver, CO or Menlo Park, CA office(s), with in-person attendance expected at least 3 days per week.
Key Responsibilities & Objectives
- Collaborate with the Offensive Security team and stakeholders across the company to identify security risks and develop solutions that balance security with business priorities.
- Perform threat modeling and penetration testing across applications, infrastructure, and corporate environments.
- Contribute to agentic tooling to increase speed and execution excellence to penetration testing, red team operations, and remediation efforts.
- Participate in red and purple team exercises and security assessments that simulate real-world attack scenarios.
- Develop scripts and tools to support and automate security testing activities.
- Partner with detection and response teams on adversarial simulations to help improve detection capabilities and incident readiness.
- Communicate security findings clearly and collaborate with engineering teams to remediate identified vulnerabilities.
- Support security incident investigations related to penetration testing or red team findings.
- Contribute to improving offensive security processes, tools, and testing methodologies.
Required Qualifications & Candidate Blueprint
- 3+ years of experience in offensive security, penetration testing, red teaming, or a related security engineering role.
- Strong written and verbal communication skills, with the ability to explain technical findings to both technical and nontechnical audiences.
- Understanding of common network protocols and standards, including DNS and TCP/IP.
- Familiarity with modern software development environments and technologies, including CI/CD pipelines, containerization (Kubernetes/Docker), and cloud platforms (AWS, GCP).
- Familiarity with defensive security tools and techniques, including IDS/IPS, packet capture, network analysis, antivirus, and EDR.
- Familiarity with AI tooling including Claude Code, Codex, and/or custom harnessing.
- Working knowledge of the MITRE ATT&CK Framework and common adversarial techniques.
- Understanding of security fundamentals related to identity and access management.
- Ability to research new technologies, develop testing approaches, and execute security assessments with guidance when needed.
- Ability to clearly document technical findings and communicate effectively through tools such as Slack, Jira, GitHub, and email.
Preferred Qualifications
- Base pay for the successful applicant will depend on a variety of job-related factors, which may include education, training, experience, location, business needs, or market demands.
- Click here to learn more about our Total Rewards, which vary by region and entity.
- If our mission energizes you and you’re ready to build the future of finance, we look forward to seeing your application.
- AI Usage Disclosure: Robinhood uses artificial intelligence (AI) tools to support parts of our recruiting process. These tools enhance the efficiency and consistency of our hiring process; however, all hiring decisions are made by our hiring teams.
- Robinhood provides equal opportunity for all applicants, offers reasonable accommodations upon request, and complies with applicable equal employment and privacy laws. Inclusion is built into how we hire and work—welcoming different backgrounds, perspectives, and experiences so everyone can do their best.
Salary & Benefits
Published compensation: Zone 1 (Menlo Park, CA; New York, NY; Bellevue, WA; Washington, DC): $157,000 – $185,000 USD · Zone 2 (Denver, CO; Westlake, TX; Chicago, IL): $139,000 – $163,000 USD · Zone 3 (Lake Mary, FL; Clearwater, FL; Gainesville, FL): $122,000 – $144,000 USD
- Challenging, high-impact work to grow your career.
- Performance driven compensation with multipliers for outsized impact, bonus programs, equity ownership, and 401(k) matching.
- Top Tier benefits to fuel your work, including 100% paid health insurance for employees with 90% coverage for dependents.
- Access to the Robinhood Employee Fund that gives eligible US employees the opportunity to invest in a private employee fund that provides exposure to Robinhood Ventures funds.
- Access to the best AI tools on the market and continuous AI skill-building for every employee, technical or not.
- Lifestyle wallet - a highly flexible benefits spending account for wellness, learning, and more.
Salary Benchmark
This role’s published compensation is compared with active employer-disclosed ranges for the same role, in the same currency and pay period.
Benchmark uses active employer job postings in our database, excludes this listing, and matches the currency and pay period. It is not a third-party salary estimate; currencies are not converted.
Full Job Description
The following is the complete job description supplied by the source. We sanitize unsafe markup and remove external links, but do not shorten or rewrite the employer's source content.
Join us in building the future of finance.
Our mission is to democratize finance for all. An estimated $124 trillion of assets will be inherited by younger generations in the next two decades. The largest transfer of wealth in human history. If you’re ready to be at the epicenter of this historic cultural and financial shift, keep reading.
About the team + role
We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards.
The Offensive Security’s mission is to identify and reduce real-world security risks across Robinhood by simulating adversary behavior and testing defenses. As an Offensive Security Engineer, you will plan and execute security assessments across applications, infrastructure, and physical environments, and partner closely with engineering and security teams to strengthen detection and response capabilities. You will help prioritize risk, contribute to remediation efforts, and develop tools and techniques that improve how we test and secure our systems. Your work will directly support the safety and reliability of products used by millions of customers.
This role is based in our Bellevue, WA, New York, NY, Denver, CO or Menlo Park, CA office(s), with in-person attendance expected at least 3 days per week.
At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams.
What you’ll do
- Collaborate with the Offensive Security team and stakeholders across the company to identify security risks and develop solutions that balance security with business priorities.
- Perform threat modeling and penetration testing across applications, infrastructure, and corporate environments.
- Contribute to agentic tooling to increase speed and execution excellence to penetration testing, red team operations, and remediation efforts.
- Participate in red and purple team exercises and security assessments that simulate real-world attack scenarios.
- Develop scripts and tools to support and automate security testing activities.
- Partner with detection and response teams on adversarial simulations to help improve detection capabilities and incident readiness.
- Communicate security findings clearly and collaborate with engineering teams to remediate identified vulnerabilities.
- Support security incident investigations related to penetration testing or red team findings.
- Contribute to improving offensive security processes, tools, and testing methodologies.
What you bring
- 3+ years of experience in offensive security, penetration testing, red teaming, or a related security engineering role.
- Passion for challenging security assumptions, identifying vulnerabilities, and helping teams address security risks.
- Strong written and verbal communication skills, with the ability to explain technical findings to both technical and nontechnical audiences.
- Interest in not only identifying security issues but also partnering with teams to resolve them.
- Understanding of common network protocols and standards, including DNS and TCP/IP.
- Experience working with macOS and Linux environments.
- Familiarity with modern software development environments and technologies, including CI/CD pipelines, containerization (Kubernetes/Docker), and cloud platforms (AWS, GCP).
- Familiarity with defensive security tools and techniques, including IDS/IPS, packet capture, network analysis, antivirus, and EDR.
- Familiarity with AI tooling including Claude Code, Codex, and/or custom harnessing.
- Working knowledge of the MITRE ATT&CK Framework and common adversarial techniques.
- Understanding of security fundamentals related to identity and access management.
- Experience reading or writing code in one or more programming languages, such as Python, Go, or JavaScript.
- Ability to research new technologies, develop testing approaches, and execute security assessments with guidance when needed.
- Experience collaborating with cross-functional or distributed teams.
- Ability to clearly document technical findings and communicate effectively through tools such as Slack, Jira, GitHub, and email.
What we offer
- Challenging, high-impact work to grow your career.
- Performance driven compensation with multipliers for outsized impact, bonus programs, equity ownership, and 401(k) matching.
- Top Tier benefits to fuel your work, including 100% paid health insurance for employees with 90% coverage for dependents.
- Access to the Robinhood Employee Fund that gives eligible US employees the opportunity to invest in a private employee fund that provides exposure to Robinhood Ventures funds.
- Access to the best AI tools on the market and continuous AI skill-building for every employee, technical or not.
- Lifestyle wallet - a highly flexible benefits spending account for wellness, learning, and more.
- Employer-paid life & disability insurance, fertility benefits, and mental health benefits.
- Time off to recharge including company holidays, paid time off, sick time, parental leave, and more!
- Exceptional office experience with catered meals, events, and comfortable workspaces.
In addition to the base pay range listed below, this role is also eligible for bonus opportunities + equity + benefits.
Base pay for the successful applicant will depend on a variety of job-related factors, which may include education, training, experience, location, business needs, or market demands. The expected base pay range for this role is based on the location where the work will be performed and is aligned to one of 3 compensation zones. For other locations not listed, compensation can be discussed with your recruiter during the interview process.
Base Pay Range:
Click here to learn more about our Total Rewards, which vary by region and entity.
If our mission energizes you and you’re ready to build the future of finance, we look forward to seeing your application.
AI Usage Disclosure: Robinhood uses artificial intelligence (AI) tools to support parts of our recruiting process. These tools enhance the efficiency and consistency of our hiring process; however, all hiring decisions are made by our hiring teams.
Robinhood provides equal opportunity for all applicants, offers reasonable accommodations upon request, and complies with applicable equal employment and privacy laws. Inclusion is built into how we hire and work—welcoming different backgrounds, perspectives, and experiences so everyone can do their best. Please review the Privacy Policy for your country of application.
Editor’s Market Perspective (Our Custom Analysis)
Why This Position Matters
This opening may suit candidates who can demonstrate experience relevant to the employer's published requirements. Its strongest career signal is the scope of the work itself — particularly Collaborate with the Offensive Security team and stakeholders across the company to identify security risks and develop solutions that balance security with business priorities. — rather than a generic title alone.
Resume & Application Strategy
For the application, connect specific examples from your experience to the responsibilities and qualifications in the employer's description. Quantify outcomes from comparable work, and place the most relevant evidence near the top of the resume. When the employer explicitly names tools, platforms, leadership scope, or domain experience, use those source terms accurately and in context.
We organize source-provided information into this independent job-seeker overview. Compensation is shown only when the source provides it; the official listing remains the authority for current requirements and application instructions.