Senior Security Engineer

Block is one company built from many blocks, all united by the same purpose of economic empowerment. The blocks that form our foundational teams — People, Finance, Counsel, Hardware, Information Security, Platform Infrastructure Engineering, and more — provide support and guidance at the corporate level. They work across business groups and around the globe, spanning time zones and disciplines to develop inclusive People policies, forecast finances, give legal counsel, safeguard systems, nurture new initiatives, and more. Every challenge creates possibilities, and we need different perspectives to see them all. Bring yours to Block.

The Role

Our Cloud Security team advances the safety and security of Block’s expansive cloud ecosystem. 

We identify and evaluate cloud risks, apply contextual insights to guide responses, and design controls that effectively reduce risk while minimizing user impact. Achieving these objectives requires fostering strong partnerships with our internal customers and collaborating closely with partner platform teams.

The team provides capabilities that eliminate entire categories of risk through secure defaults and preventative controls. Additionally, we maintain flexibility through posture management and reactive controls, allowing us to better understand and address risks within our environment. 

We are seeking a skilled Senior Cloud Security Engineer with a deep understanding of securing infrastructure and services at scale to join us in advancing this mission.

You Will

• Design and implement security components for the next phase of Block’s cloud, shaping how we use it for years to come.
• Build automation to help us discover, measure and contextualize security issues.
• Partner with platform teams to deliver solutions that permanently solve entire categories of security risk.
• Deliver key cloud security assurance functions, balancing the need to remediate important issues with being responsible stewards of our developers’ time.
• Be responsible for producing quality software that stands the test of time.

You Have

• 5+ years of experience as a software or security engineer (we’re a Python shop, but our Go footprint is growing rapidly).
• 4+ years of experience developing applications for and securing infrastructure running on AWS or GCP.
• Experience using Infrastructure-as-Code tools such as Terraform or CloudFormation, understanding of best practices and pitfalls when deploying and securing them.
• Experience maturing the cloud security posture of large, complex environments.
• Demonstrated ability to successfully deliver complex, multi-faceted projects from concept to launch and operations.

Bonus Points:

• Familiarity with BI and data exploration tools like Looker and Snowflake
• Ability to work well cross-functionally, and communicate with audiences who may not have a security or engineering background.