Description
As a Principal Security Engineer focused on Software Security Engineering at Block, you will be a technical leader reporting to the CISO responsible for setting the bar for security excellence and driving the creation of innovative, world-class software solutions to complex security problems.
You will work across Engineering and Information Security (InfoSec) to champion a "Secure by Design" culture, directly influencing the architecture of Block's core products and infrastructure. Your mandate is to provide deep technical expertise and strategic direction to ensure that security is enabling fast, secure innovation across the business.
Responsibilities:
- Deliver world-class and innovative software solutions to security problems, tackling Block's top risks such as technology fragmentation and security after-the-fact.
- Define the multi-year technical strategy for software security at Block, guiding architectural decisions and ensuring alignment with engineering best practices.
- Identify and lead the development and implementation of common, high-leverage security solutions and infrastructure across Block's business units.
- Drive engineering excellence, specifically around security, for critical systems like tokenization platforms.
- Spearhead the security strategy and engineering excellence for mobile software and platforms across Block's product ecosystem.
- Champion security reliability engineering (SecRelEng) practices to improve the overall resilience and availability of security services and infrastructure.
- Lead technical planning and implementation for high-priority security initiatives.
- Partner with engineering leaders to integrate security practices early into the development lifecycle.
- Foster technical excellence within InfoSec and mentor engineers on technical execution, system design, and technology choices.
Requirements:
- Track record of exemplary technical leadership and decision-making at a Principal or equivalent level.
- 10+ years of experience developing and shipping production software and critical services.
- Mastery of system design and architecture.
- Deep technical understanding of security vulnerabilities, risks, countermeasures, and compensating controls.
- Exceptional collaboration and communication skills.
- Demonstrable ability to write production-quality code/script for security automation and tooling.
Preferred:
- Experience leading and driving significant technical initiatives across multiple team, organizational and product boundaries.
- Experience in the financial technology, payments, or cryptocurrency/bitcoin domain.
- Experience improving engineering standards and practices for security.
We offer remote work, medical insurance, flexible time off, retirement savings plans, and modern family planning.