Engineering Manager, Offensive Security & Vulnerability Management

Join a leading fintech company that’s democratizing finance for all.

Robinhood Markets was founded on a simple idea: that our financial markets should be accessible to all. With customers at the heart of our decisions, Robinhood and its subsidiaries and affiliates are lowering barriers and providing greater access to financial information. Together, we are building products and services that help create a financial system everyone can participate in.

With growth as the top priority...

The business is seeking curious, growth-minded thinkers to help shape our vision, structures and systems; playing a key-role as we launch into our ambitious future. If you’re invigorated by our mission, values, and drive to change the world — we’d love to have you apply.

About the team + role

Robinhood’s Security Operations team is seeking a strategic and technical Senior Manager to lead our Offensive Security and Vulnerability Management programs. In this role, you’ll drive our ability to proactively identify, assess, and reduce risk across the company by simulating advanced threat actor behaviors and maturing how we prioritize, and remediate vulnerabilities.

You will also spearhead our Autonomic Security Operations strategy, scaling security through automation, codification, and continuous validation. By transforming security knowledge into reusable, testable artifacts, you’ll help deliver ongoing assurance in our controls and remediation efforts, while amplifying the deep expertise and impact of our teams

You’ll lead high-caliber teams focused on internal offensive security engagements, such as red teaming and penetration testing, as well as vulnerability research and agile vulnerability lifecycle management, working cross-functionally to translate findings into meaningful security and business outcomes.

This role is part of our dynamic Security business, reporting directly to the Head of Security Operations. At Robinhood, we value diverse experiences and unique perspectives. Even if you don’t meet every single qualification, we encourage you to apply! We’re looking for team members who bring something new to the table and are ready to help us elevate our security game.

The role is located in the office location(s) listed on this job description which will align with our in-office working environment. Please connect with your recruiter for more information regarding our in-office philosophy and expectations.

What you’ll do

• Lead the Offensive Security team in planning and executing red team operations, internal penetration tests, and adversary emulation campaigns.
• Oversee the Vulnerability Management team responsible for running our bug bounty program as well as continuous discovery, triage, and remediation of vulnerabilities across infrastructure,applications, and cloud environments.
• Define and drive the strategy for Autonomic Security Operations, investing in automated testing and validation pipelines that codify security knowledge and detection coverage.
• Partner closely with engineering, product, threat intelligence and detection & response stakeholders to ensure controls are continuously tested and vulnerabilities are effectively surfaced.
• Build processes, tooling, and dashboards to track and communicate vulnerability and control assurance metrics to stakeholder and leadership.
• Contribute to long-term security planning by identifying control gaps, operational bottlenecks, and opportunities to scale security through automation.

What you bring

• 5+ years of experience in security, with 3+ years managing technical teams in Offensive Security, Red Teaming, or Vulnerability Management.
• Strong technical foundations in adversary simulation, threat modeling, and vulnerability lifecycle management.
• Strategic thinking, translating offensive findings and vuln data into business risk language and operational improvements.
• Experience building and scaling automated security validation (e.g. Purple teaming, attack simulation, continuous testing frameworks).
• Operating in complex challenging environments and networks
• Influence across functions and driving remediation outcomes without direct authority.

What we offer

• Market competitive and pay equity-focused compensation structure
• 100% paid health insurance for employees with 90% coverage for dependents
• Annual lifestyle wallet for personal wellness, learning and development, and more!
• Lifetime maximum benefit for family forming and fertility benefits
• Dedicated mental health support for employees and eligible dependents
• Generous time away including company holidays, paid time off, sick time,