Senior Security Engineer, Platform SecurityBlock · Bay Area, CA, United States of America

Senior Security Engineer, Platform Security

🗓️ Posted 2026-07-20 Bay Area, CA, United States of America Hybrid ICT
💰 Salary Not shared 📊 Market 15,000 CAD–22,500 CAD/mo

About the Company

Block builds simple, powerful tools that make progress towards an economy that's truly open to all. Each of our brands unlocks different aspects of the economy for more people. Square makes commerce and financial services accessible to sellers. Cash App is the easy way to spend, send, and store money. Afterpay is transforming the way customers manage their spending over time. TIDAL is a music platform that empowers artists to thrive as entrepreneurs. Bitkey is a simple self-custody wallet built for bitcoin. Proto is a suite of bitcoin mining products and services. Together, we're helping build a financial system that is open to everyone.

Responsibilities

  • ● Architect and evolve cloud security guardrails.
  • ● Design and implement SCPs, GCP org policies, and IAM controls that shape how Block uses cloud infrastructure for years to come.
  • ● Build automation to discover, measure, and contextualize security issues.
  • ● Develop integrations with CSPM/DSPM tools and internal platforms to surface and prioritize findings.
  • ● Own the cloud security exception lifecycle.
  • ● Build and maintain the tooling and processes that allow teams to request, review, and track security exceptions at scale.
  • ● Partner with platform teams to deliver solutions that permanently eliminate entire categories of cloud security risk.
  • ● Deliver key cloud security assurance functions.
  • ● Balance the need to remediate critical misconfigurations and sensitive data exposures with being responsible stewards of our developers' time.
  • ● Develop risk-based prioritization.
  • ● Build data pipelines and dashboards that aggregate security signals and help leadership understand posture trends.
  • ● Respond to and triage cloud security alerts.
  • ● Support on-call rotations, investigate findings, and help engineers resolve issues quickly.
  • ● Produce quality software that stands the test of time and scales across Block's multi-cloud footprint.
  • ● Think, build and iterate in an AI-augmented environment.

Requirements

  • ● 5+ years of experience as a software or security engineer.
  • ● 4+ years of experience securing infrastructure running on AWS and/or GCP at scale.
  • ● Deep experience with Infrastructure-as-Code.
  • ● Experience with Terraform (including securing Terraform pipelines), SCPs, GCP org policies, and understanding of best practices and pitfalls when deploying guardrails at organizational scale.
  • ● Experience with cloud security posture management (CSPM) tools such as Wiz.
  • ● Familiarity with DSPM concepts (sensitive data discovery, classification, and remediation).