Company Description
Block is one company built from many blocks, all united by the same purpose of economic empowerment. The blocks that form our foundational teams - People, Finance, Counsel, Hardware, Information Security, Platform Infrastructure Engineering, and more - provide support and guidance at the corporate level. They work across business groups and around the globe, spanning time zones and disciplines to develop inclusive People policies, forecast finances, give legal counsel, safeguard systems, nurture new initiatives, and more. Every challenge creates possibilities, and we need different perspectives to see them all. Bring yours to Block.
Job Description
The Cloud Security Risk and Insights team is responsible for discovering, tracking and enabling the business to remediate the biggest security risks we face across Block's cloud ecosystems. We drive the creation of security policy and best practices. We measure and aggregate deviations from these policies. We develop capabilities to estimate security risk based on these signals and business context, and enable product teams to resolve the most important issues first. This team's work drives our cloud security strategy, and is the view Block uses to measure progress of our cloud security posture over time.
We believe that the secure option should be the easiest option for our users. We're looking for a strong Senior Cloud Security Engineer with a deep understanding of securing infrastructure and services at scale in a cloud-native world to help us execute on this vision.
You will:

• Build the security components of the next phase of Block's cloud, shaping how we use it for years to come.
• Build automation to help us discover, measure and contextualize security issues.
• Partner with platform teams to deliver solutions that permanently solve entire categories of security risk.
• Deliver key cloud security assurance functions, balancing the need to remediate important issues with being responsible stewards of our developers' time.
• Be responsible for producing quality software that stands the test of time.

Qualifications
You have:

• 5+ years of experience as a software or security engineer (we're a Python shop, but our Go footprint is growing rapidly).
• 4+ years of experience developing applications for and securing infrastructure running on AWS or GCP.
• Experience using Infrastructure-as-Code tools such as Terraform or CloudFormation, understanding of best practices and pitfalls when deploying and securing them.
• Experience maturing the cloud security posture of large, complex environments.
• Demonstrated ability to successfully deliver complex, multi-faceted projects from concept to launch.

Bonus Points:

• Familiarity with BI and data exploration tools like Looker and Snowflake
• Ability to work well cross-functionally, and communicate with audiences who may not have a security or engineering background.

Qualifications
You have:

• 5+ years of experience as a software or security engineer (we're a Python shop, but our Go footprint is growing rapidly).
• 4+ years of experience developing applications for and securing infrastructure running on AWS or GCP.
• Experience using Infrastructure-as-Code tools such as Terraform or CloudFormation, understanding of best practices and pitfalls when deploying and securing them.
• Experience maturing the cloud security posture of large, complex environments.
• Demonstrated ability to successfully deliver complex, multi-faceted projects from concept to launch.

Bonus Points:

• Familiarity with BI and data exploration tools like Looker and Snowflake
• Ability to work well cross-functionally, and communicate with audiences who may not have a security or engineering background.