3 months ago
Base Salary
$218k - $327k/yr
Responsibilities
- Architect and evolve cloud security guardrails using SCPs, GCP organization policies, and IAM controls.
- Build automation and integrations with CSPM/DSPM tools and internal platforms to discover, measure, contextualize, and prioritize security issues.
- Own the cloud security exception lifecycle, including tooling and workflows for requesting, reviewing, and tracking exceptions.
- Partner with platform teams to eliminate categories of cloud security risk.
- Perform cloud security assurance, remediate critical misconfigurations and sensitive data exposures, and support developer-friendly security practices.
- Build data pipelines and dashboards that aggregate security signals and communicate posture trends to leadership.
- Respond to and triage cloud security alerts, participate in on-call rotations, and help engineers resolve findings.
- Develop scalable, durable software across Block’s multi-cloud footprint.
Requirements
- At least 5 years of experience as a software or security engineer is required.
- At least 4 years of experience securing infrastructure running on AWS and/or GCP at scale is required.
- Deep Infrastructure-as-Code experience, including Terraform, securing Terraform pipelines, SCPs, and GCP organization policies, is required.
- Experience with CSPM tools such as Wiz and familiarity with DSPM concepts is required.
- Strong understanding of AWS and GCP IAM policies, roles, service accounts, permission boundaries, and organizational constraints is required.
- Experience maturing cloud security posture in large, complex, multi-account or multi-project environments is required.
- Ability to deliver complex, multifaceted projects from concept to launch is required.
- Fluency with AI-assisted development tools such as Claude Code, Cursor, GitHub Copilot, or similar agentic coding tools in production is required.
- Experience with Kubernetes security in environments such as EKS or GKE is preferred.
- Familiarity with Looker and Snowflake for security metrics and dashboards is preferred.
- Experience with security exception or risk-acceptance workflows, cloud networking, network segmentation, and multi-business-unit compliance requirements is preferred.
Benefits
- Remote work is offered.
- Medical insurance is offered.
- Flexible time off is offered.
- Retirement savings plans are offered.
- Modern family planning benefits are offered.
Tech Stack
Categories
About Block
Block is one company built from many blocks, all united by the same purpose of economic empowerment. The blocks that form our foundational teams — People, Finance, Counsel, Hardware, Information Security, Platform Infrastructure Engineering, and more — provide support and guidance at the corporate level. They work across business groups and around the globe, spanning time zones and disciplines to develop inclusive People policies, forecast finances, give legal counsel, safeguard systems, nurture new initiatives, and more. Every challenge creates possibilities, and we need different perspectives to see them all. Bring yours to Block.