Senior Security Engineer, Platform Security

4 months, 1 week ago
Full-time
Senior
Cybersecurity
Block

Block

Block is a company that consists of Square, Cash App, Spiral, TIDAL, TBD, and foundational teams. They are focused on economic empowerment by creating tools to expand access to the economy. Square helps sellers run and grow businesses, Cash App redefin...

Capital Markets
10K-50K
Founded 2009

Description

  • Architect and evolve cloud security guardrails across Block’s cloud environments.
  • Design and implement SCPs, GCP org policies, and IAM controls.
  • Build automation to discover, measure, and contextualize security issues.
  • Develop integrations with CSPM and DSPM tools and internal platforms to surface and prioritize findings.
  • Own the cloud security exception lifecycle, including tooling and processes for requests, review, and tracking.
  • Partner with platform teams to eliminate categories of cloud security risk.
  • Deliver cloud security assurance by remediating misconfigurations and sensitive data exposures.
  • Develop risk-based prioritization pipelines and dashboards for leadership visibility into security posture trends.
  • Respond to and triage cloud security alerts, including on-call support and investigations.
  • Produce durable software that scales across a multi-cloud footprint.

Requirements

  • 5+ years of experience as a software engineer or security engineer.
  • 4+ years of experience securing infrastructure on AWS and/or GCP at scale.
  • Deep experience with Infrastructure-as-Code, including Terraform and securing Terraform pipelines.
  • Experience with SCPs, GCP org policies, and organizational-scale guardrails.
  • Experience with CSPM tools such as Wiz and familiarity with DSPM concepts.
  • Strong understanding of AWS and GCP IAM, including roles, service accounts, permission boundaries, and org-level constraints.
  • Experience maturing the cloud security posture of large, complex, multi-account or multi-project environments.
  • Demonstrated ability to deliver complex, multi-faceted projects from concept to launch.
  • Demonstrated fluency with AI-assisted development tools such as Claude Code, Cursor, or GitHub Copilot in production work.
  • Preferred: experience with Kubernetes security in EKS or GKE.
  • Preferred: familiarity with BI and data exploration tools such as Looker and Snowflake.
  • Preferred: experience building or operating security exception or risk acceptance workflows at scale.
  • Preferred: familiarity with cloud networking and network segmentation strategies.
  • Preferred: ability to communicate effectively cross-functionally with non-security or non-engineering audiences.
  • Preferred: experience supporting multi-business-unit organizations with varying compliance and regulatory requirements.

Benefits

  • Competitive pay with a zone-based U.S. salary range of $185,200 to $326,800 USD, depending on location.
  • Remote work options.
  • Medical insurance.
  • Flexible time off.
  • Retirement savings plans.
  • Modern family planning support.
  • Inclusive interview experience with reasonable accommodations for disabled applicants.
  • Equal opportunity employer with fair chance consideration for applicants with arrest or conviction records.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

IT Security & Compliance Lead (Amsterdam, NLD)

B Lab 51-250 Diversified Consumer Services

B Lab is seeking a full-time IT Security & Compliance Lead in Amsterdam to establish consistent security governance, compliance, and risk management across its consolidating global network.

Cybersecurity Penetration Testing Salesforce
6 hours, 37 minutes ago

IT Security & Compliance Lead (São Paulo, BR)

B Lab 51-250 Diversified Consumer Services

B Lab is seeking an IT Security & Compliance Lead in São Paulo to establish consistent security governance, compliance, risk management, and incident-response practices across its consolidating global nonprofit network.

Cybersecurity Penetration Testing Salesforce
6 hours, 37 minutes ago

Information Security Engineer

Edmentum 1K-5K Diversified Consumer Services

Edmentum is seeking a Remote First Information Security Engineer to protect the systems, data, and learning platforms supporting millions of students while strengthening security operations and compliance.

Agile Penetration Testing
7 hours, 22 minutes ago

Middle+/Senior DevSecOps Engineer | TechCore

Boosta 501-1000 information technology & services

Boosta is hiring a Middle+/Senior DevSecOps Engineer for its service team to secure and support infrastructure and digital projects across the holding.

AWS Azure Bash CI/CD Cloudflare DNS Docker GCP GitHub Actions GitLab CI HashiCorp Vault Helm JavaScript Jenkins Kubernetes Python SIEM SOC SonarQube Terraform TLS WAF
1 day, 6 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers