Block
SeniorSecurityEngineer,PlatformSecurity
Neural analysis suggests this role is
optimal for Senior candidates.
“Senior Security Engineer, Platform Security at Block. Skills: Platform Security, Cloud Security, Infrastructure Security, Risk Management. Architect cloud security guardrails. Evolve cloud security guardrails”
Industry & Context.
Root cause analysis; Troubleshooting
On-call rotations
What They're Looking For.
Must Have
5+ years software or security engineer, 4+ years securing AWS/GCP infrastructure, Deep Infrastructure-as-Code experience, Terraform experience, SCP experience, GCP org policies experience, CSPM tools experience, DSPM concepts familiarity, AWS IAM policies experience, GCP IAM experience, Organizational scale guardrail deployment experience, Maturing cloud security posture experience, Deliver complex projects experience, AI-assisted development tools fluency
Nice to Have
Kubernetes security experience, BI and data exploration tools familiarity, Security exception workflows experience, Cloud networking familiarity, Network segmentation strategies familiarity, Cross-functional work experience, Multi-business-unit org support experience
What You'll Do.
Architect cloud security guardrails
Evolve cloud security guardrails
Design GCP org policies
Implement GCP org policies
Implement IAM controls
Build automation for issues
Discover security issues
Measure security issues
Contextualize security issues
Develop CSPM integrations
Develop DSPM integrations
Develop internal platform integrations
Own cloud security exception lifecycle
Build exception tooling
Maintain exception tooling
Process security exceptions
Track security exceptions
Partner with platform teams
Deliver risk elimination solutions
Deliver cloud security assurance
Remediate misconfigurations
Remediate data exposures
Develop risk-based prioritization
Aggregate security signals
Understand posture trends
Help engineers resolve issues
Produce quality software
Build in AI environment
Iterate in AI environment
How You'll Work.
Team & Collaboration
Platform teams; Cross-functional teams
Full Job Description
Block builds simple, powerful tools that make progress towards an economy that’s truly open to all. Each of our brands unlocks different aspects of the economy for more people. Square makes commerce and financial services accessible to sellers. Cash App is the easy way to spend, send, and store money. Afterpay is transforming the way customers manage their spending over time. TIDAL is a music platform that empowers artists to thrive as entrepreneurs. Bitkey is a simple self-custody wallet built for bitcoin. Proto is a suite of bitcoin mining products and services. Together, we’re helping build a financial system that is open to everyone. Join us. The Role The Platform Security team is responsible for securing Block's cloud, compute, and network infrastructure across multiple business units including Square, Cash, and Afterpay. We discover, track, and enable the business to remediate the most critical security risks across Block's cloud ecosystems (AWS and GCP). We drive the creation of cloud security policy and best practices, measure and aggregate deviations from these policies, and develop capabilities to estimate security risk based on cloud signals and business context. This work drives Block's cloud security strategy and is the lens through which Block measures progress of our cloud security posture over time. We believe that the secure option should be the easiest option for our users. We're looking for a strong Senior Platform Security Engineer with a deep understanding of securing cloud infrastructure and services at scale to help us execute on this vision. You Will Architect and evolve cloud security guardrails. Design and implement SCPs, GCP org policies, and IAM controls that shape how Block uses cloud infrastructure for years to come. Build automation to discover, measure, and contextualize security issues. Develop integrations with CSPM/DSPM tools and internal platforms to surface and prioritize findings. Own the cloud security exception lifecycle. Buil
Applying for this Senior Security Engineer, Platform Security role?
Most applicants get filtered before a human reads their resume. See if yours makes the cut.
ANONYMOUS · UNFILTERED
What do employees actually say about Block?
Real rants from real employees. Read before you apply.