Engineering Manager, Offensive Security & Vulnerability Management

About the team + role

Robinhood’s Security Operations team is seeking a strategic and technical Manager to lead our Offensive Security and Vulnerability Management programs. In this role, you’ll drive our ability to proactively identify, assess, and reduce risk across the company by simulating advanced threat actor behaviors and maturing how we prioritize, and remediate vulnerabilities.

You will also spearhead our Autonomic Security Operations strategy, scaling security through automation, codification, and continuous validation. By transforming security knowledge into reusable, testable artifacts, you’ll help deliver ongoing assurance in our controls and remediation efforts, while amplifying the deep expertise and impact of our teams

You’ll lead high-caliber teams focused on internal offensive security engagements, such as red teaming and penetration testing, as well as vulnerability research and agile vulnerability lifecycle management, working cross-functionally to translate findings into meaningful security and business outcomes.

This role is part of our dynamic Security business, reporting directly to the Head of Security Operations. At Robinhood, we value diverse experiences and unique perspectives. Even if you don’t meet every single qualification, we encourage you to apply! We’re looking for team members who bring something new to the table and are ready to help us elevate our security game.

The role is located in the office location(s) listed on this job description which will align with our in-office working environment. Please connect with your recruiter for more information regarding our in-office philosophy and expectations.

What you’ll do

• Lead the Offensive Security team in planning and executing red team operations, internal penetration tests, and adversary emulation campaigns.
• Oversee the Vulnerability Management team responsible for running our bug bounty program as well as continuous discovery, triage, and remediation of vulnerabilities across infrastructure,applications, and cloud environments.
• Define and drive the strategy for Autonomic Security Operations, investing in automated testing and validation pipelines that codify security knowledge and detection coverage.
• Partner closely with engineering, product, threat intelligence and detection & response stakeholders to ensure controls are continuously tested and vulnerabilities are effectively surfaced.
• Build processes, tooling, and dashboards to track and communicate vulnerability and control assurance metrics to stakeholder and leadership.
• Contribute to long-term security planning by identifying control gaps, operational bottlenecks, and opportunities to scale security through automation.

What you bring

• 5+ years of experience in security, with 3+ years managing technical teams in Offensive Security, Red Teaming, or Vulnerability Management.
• Strong technical foundations in adversary simulation, threat modeling, and vulnerability lifecycle management.
• Strategic thinking, translating offensive findings and vuln data into business risk language and operational improvements.
• Experience building and scaling automated security validation (e.g. Purple teaming, attack simulation, continuous testing frameworks).
• Operating in complex challenging environments and networks
• Influence across functions and driving remediation outcomes without direct authority.

What we offer

• Market competitive and pay equity-focused compensation structure
• 100% paid health insurance for employees with 90% coverage for dependents
• Annual lifestyle wallet for personal wellness, learning and development, and more!
• Lifetime maximum benefit for family forming and fertility benefits
• Dedicated mental health support for employees and eligible dependents
• Generous time away including company holidays, paid time off, sick time, parental leave, and more!
• Lively office environment with catered meals, fully stocked kitchens, and geo-specific commuter benefits