Manager of Response, Automation, Intelligence & Detection Engineering

Join us in building the future of finance.

Our mission is to democratize finance for all. An estimated $124 trillion of assets will be inherited by younger generations in the next two decades. The largest transfer of wealth in human history. If you’re ready to be at the epicenter of this historic cultural and financial shift, keep reading.

About the team + role

We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards.

The Security Operations (SecOps) team protects Robinhood and its customers by detecting, investigating, and responding to security threats across our production systems, endpoints, and cloud environments. We combine detection engineering, incident response, and threat intelligence to identify emerging risks, strengthen our defenses, and reduce the impact of attacks before they reach our customers. As we continue to evolve our security platform, we're embracing AI and automation to help our teams move faster, uncover threats more effectively, and scale our defenses against increasingly sophisticated adversaries.

As the Manager of Response, Automation, Intelligence and Detection Engineering (RAID) within SecOps, you will lead teams across North America, shaping the strategy, execution, and long term evolution of our defensive security capabilities. You'll be responsible for building high performing teams, maturing our detection and incident response programs, and ensuring we stay ahead of an increasingly sophisticated threat landscape. Working closely with Security, Engineering, Infrastructure, and Trust & Safety, you'll translate emerging threats into scalable defenses while championing the use of AI, automation, and modern engineering practices to transform how we detect, investigate, and respond to security events. This is a highly visible leadership role where your decisions will directly influence Robinhood's security posture and help protect millions of customers.

This role is based in our Menlo Park, CA or Denver, CO office(s), with in-person attendance expected at least 5 days per week.

At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams.

Applications for this role will be accepted through July 31, 2026. Please connect with your recruiter for more information about this role’s application window.

What you’ll do

• Lead the Detection & Response and Threat Intelligence organizations across North America, setting the technical vision, organizational strategy, and execution priorities for both teams.
• Mature Robinhood's detection and incident response capabilities by improving detection coverage, response workflows, operational readiness, and measurable security outcomes.
• Define and track operational metrics such as detection coverage, response time, investigation quality, and control effectiveness, using data to continuously improve team performance.
• Lead security incident response for high-severity events, serving as an Incident Commander when needed and ensuring thorough post-incident reviews that drive lasting improvements.
• Partner with Security Engineering, Infrastructure, Product Security, Trust & Safety, and Engineering leaders to translate emerging threats into scalable detection, response, and prevention capabilities.
• Drive adoption of automation, AI, and modern engineering practices to improve analyst productivity, accelerate investigations, and scale security operations.
• Contribute to long-term security strategy, annual planning, budgeting, and organizational design as the Detection & Response program continues to grow.

What you bring

• 8+ years of experience in security operations, incident response, detection engineering, threat intelligence, or a closely related security discipline.
• 4+ years of experience leading high-performing security engineering or security operations teams, including hiring, coaching, and organizational development.
• Demonstrated experience building and scaling detection and response programs, including incident response, detection engineering, operational processes, and security metrics.
• Experience leading high-severity security incidents and coordinating cross-functional response efforts involving engineering, communications, legal, and executive stakeholders.
• Strong technical foundation across modern cloud environments, endpoint security, identity systems, SIEM, EDR, and detection engineering practices, with the ability to provide technical leadership without needing to be the primary implementer.
• Experience applying automation, AI, or software engineering practices to improve the scale and effectiveness of security operations.
• Excellent communication and stakeholder management skills, with the ability to influence engineering leaders and clearly communicate technical risk to executive audiences.
• Demonstrated ability to balance strategic planning with operational execution in a fast-paced, high-growth environment.

Leadership expectations

Our ambitious roadmap requires a great culture shaped by exceptional leaders. Here’s what we expect from them: