# Security Engineer, Business Continuity & Risk

**Company**: Block
**Location**: Bay Area, CA
**Experience**: senior
**Job type**: full-time
**Category**: Security
**Industry**: Finance

**Apply**: https://job-boards.greenhouse.io/block/jobs/5427789008?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_853f476d-3c2

## Description

## The Role

Square Financial Services, Inc. (SFS) is Block's bank, launched in March 2021, providing lending and FDIC-insured deposit products to individuals and small businesses nationwide.

SFS Risk Management is scaling vendor security, third-party risk, and business continuity through innovation. The Risk team designs and promotes frameworks, standards, and oversight to elevate security considerations among vendors, simplify regulatory obligations, and ensure resilience in business operations.

As a Security Engineer, you will build data pipelines, integrations, and agentic AI workflows that turn manual governance processes into products that run continuously, produce measurable results, and hold up to audit end-to-end.

## Responsibilities

- Own and operationalize a SFS third-party risk management and business continuity program.

- Define the technical approach for ambiguous, cross-team problem spaces.

- Build and operate pipelines and integrations that aggregate, normalize, and join risk, control, and asset signals from systems of record across Block and SFS.

- Translate standards and compliance requirements into policy-as-code: enforceable, testable rules that run continuously.

- Design agentic AI workflows that pair LLM reasoning with deterministic, auditable decision layers for evidence analysis, control monitoring, classification, and assessment.

- Automate evidence collection and continuous control monitoring to replace point-in-time audit preparation.

- Partner with Security, Procurement, Resilience, and Engineering teams to find manual processes most worth turning into a product.

- Contribute to technical design discussions, evaluating the security and reliability properties of the platform itself.

## Requirements

- Third-party risk management and business continuity experience.

- 4+ years building production software in backend, platform, data, or software engineering.

- Multi-year ownership of a production system, including on-call, SLOs, and maintenance work.

- Proficiency with at least one of Python, Kotlin, Java, or Go, and comfort reading unfamiliar codebases.

- Hands-on experience building with LLMs and opinions about where model judgment belongs and where it doesn't.

- Experience with integration patterns: REST APIs, webhooks, authentication flows, event-driven architectures.

- Experience pulling, normalizing, and joining data from multiple imperfect sources, and handling edge cases gracefully.

- Experience defining technical direction where the problem was ambiguous, and carrying it across team boundaries.

- Attention to detail balanced with pragmatism about risk-based prioritization.

- Curiosity, persistence, and comfort operating with minimal structure in an early-stage program.

## Nice to Have

- Working knowledge of a security or compliance framework such as PCI DSS, SOX, SOC 2, ISO 27001, or NIST.

- Production-scale LLM or agentic systems experience.

## Ideal Candidate

Ideal candidates will have familiarity with some of the technologies in our environment:

- Languages & Frameworks: Python, Java, Kotlin, Go

- AI: LLM APIs, agent frameworks and tool-use patterns

- APIs & Data: HTTP, JSON, gRPC, Protocol Buffers, SQL, Snowflake

- Infrastructure: AWS, GCP, Kubernetes, Terraform, CI/CD, event-driven architecture

## Skills

### Required
- Python
- Kotlin
- Java
- Go
- LLM APIs
- REST APIs
- event-driven architectures
- SQL
- Snowflake
- AWS
- GCP
- Kubernetes
- Terraform

### Nice to have
- PCI DSS
- SOX
- SOC 2
- ISO 27001
- NIST

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/block/jobs/5427789008?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)