Description
The Platform Security team at Block is responsible for securing the company's cloud, compute, and network infrastructure across multiple business units. We are looking for a Senior Platform Security Engineer to help execute on this vision.
The Role: The Senior Platform Security Engineer will architect and evolve cloud security guardrails, design and implement SCPs, GCP org policies, and IAM controls. They will also build automation to discover, measure, and contextualize security issues, own the cloud security exception lifecycle, and partner with platform teams to deliver solutions that permanently eliminate entire categories of cloud security risk.
Responsibilities:
- Architect and evolve cloud security guardrails
- Build automation to discover, measure, and contextualize security issues
- Own the cloud security exception lifecycle
- Partner with platform teams to deliver solutions that permanently eliminate entire categories of cloud security risk
- Deliver key cloud security assurance functions
- Develop risk-based prioritization
- Respond to and triage cloud security alerts
- Produce quality software that stands the test of time and scales across Block's multi-cloud footprint
Requirements:
- 5+ years of experience as a software or security engineer
- 4+ years of experience securing infrastructure running on AWS and/or GCP at scale
- Deep experience with Infrastructure-as-Code
- Experience with cloud security posture management (CSPM) tools
- Strong understanding of IAM
- Experience maturing the cloud security posture of large, complex, multi-account/multi-project environments
Preferred Qualifications:
- Experience with Kubernetes security
- Familiarity with BI and data exploration tools
- Experience building or operating security exception/risk acceptance workflows at scale
- Familiarity with cloud networking and network segmentation strategies
Benefits:
- Remote work
- Medical insurance
- Flexible time off
- Retirement savings plans
- Modern family planning