Principal Product Manager, Engine Security

As the Principal Product Manager for Engine Security, you will hold the holistic vision for the integrity of the Roblox engine, serving as the strategic leader for how our platform defends against exploitation at a massive scale. You will not only define the roadmap but also shape the philosophy of how Roblox balances robust security with performant, open-ended gameplay.

You will drive the strategy and be hands-on seeing it executed for the Engine Security team, overseeing client and server protections, detection and response pipelines for vulnerabilities, and the tooling necessary to support complex investigations. A critical part of this role involves defining the next generation of Developer tooling, empowering our creators to natively address cheating and augmented play within their experiences.

If you are a visionary product leader who thrives on high-stakes technical challenges, loves outmaneuvering bad actors, and can align cross-functional teams around a shared mission of safety and fair play, you’ll be a great fit.

The role is based in San Mateo, CA (hybrid with Tues-Thurs onsite).

You will:

• Define the long-term vision and strategy for Engine Security, setting the industry standard for how a platform protects its infrastructure and its community.
• Drive alignment across the organization, partnering with Engineering Directors, Legal, Trust & Safety, and Executive leadership to treat security not just as a feature, but as a fundamental pillar of the Roblox platform.
• Oversee the end-to-end roadmap for client/server protections and vulnerability response, ensuring we are proactively closing attack vectors before they can be widely exploited.
• Use deep analytical insights with our data science teams to identify emerging threat patterns, define the KPIs that measure the efficacy of our security posture, and support A/B and similar tests as-needed.
• Go hands-on to bring the roadmap to life partnering with engineering leadership to ensure security features are built and deployed successfully.
• Empower the Developer Community by conceptualizing and launching self-serve tooling that allows creators to detect, monitor, and mitigate cheating and augmented play specific to their game mechanics.
• Lead complex incident response strategies, acting as a key decision-maker during critical security events and investigations.
• Balance complex tradeoffs between security enforcement, engine performance, and developer freedom, using deep technical understanding to advocate for solutions that scale.
• Mentor and elevate the product culture within the team, fostering an environment of rigorous thinking, experimentation, and relentless customer empathy.

You have:

• 10+ years of product management experience, with a significant portion spent in platform security, anti-cheat, cybersecurity, or highly technical infrastructure roles.
• Technical Fluency: A strong technical background (CS degree or equivalent experience) with the ability to discuss low-level architecture, C++, OS fundamentals, and injection techniques with Principal Engineers.
• Strategic Leadership: Proven ability to define a multi-year product vision and rally large, cross-functional teams (Engineering, Data Science, Ops) behind it.
• Entrepreneurial drive: You have a "Founder" mindset. You are comfortable operating in ambiguity, making high-stakes decisions with limited information, and driving projects from vague concepts to global launch.
• Highly Analytical: Proficiency in defining and tracking complex metrics. You use data to find the "signal in the noise" when detecting anomalies or measuring the impact of security patches on user retention.
• Executive Communication: Exceptional written and verbal communication skills. You can explain complex security vulnerabilities to non-technical executives and define detailed technical specs for engineers with equal fluency.
• Experience with two-sided marketplaces or UGC platforms is a strong plus.