Drimva

Block

Senior Security Engineer, Platform Security

$185K–$327K

Bay Area, CA, United States of America +1 · Remote · Senior · Full-time · Posted Jun 2, 2026

Location
Bay Area, CA, United States of America
US - CA - Bay Area - Remote
Experience
8+ years as a software, infrastructure, or security engineer, including 4+ years securing production infrastructure at scale.

About the job

Secures Block’s cloud, compute, and network infrastructure by building security controls, improving risk detection, and embedding secure defaults across business units.

What you'll do

  • Design and deploy cloud, workload, and network security guardrails; improve IAM, policy enforcement, and misconfiguration discovery.
  • Build and operate production security services, integrations, and infrastructure-as-code, including protections for Kubernetes, CI/CD, and service connectivity.
  • Partner with engineering teams, prioritize and measure security improvements, participate in on-call, and lead projects through rollout.

What they ask for

  • Hands-on experience securing production infrastructure in AWS and/or GCP.
  • Deep infrastructure security knowledge, including least privilege, workload isolation, network segmentation, and secure service communication.
  • Strong programming skills in Python, Go, or a similar language, with production tooling or service experience.
  • Experience with Terraform or similar infrastructure-as-code tools and delivering complex projects.

Nice to have

  • Experience delivering security improvements across infrastructure layers and teams.
  • Familiarity with CSPM, DSPM, security metrics, automated exception workflows, or controls in large multi-account, multi-project, or shared Kubernetes environments.

Pay

$217,800 — $326,800 USD (base salary); $207,000 — $310,400 USD (base salary); $196,100 — $294,100 USD (base salary); $185,200 — $277,800 USD (base salary)

Tools

AWS, GCP, Kubernetes, Python, Go, Terraform

AI focus

Use AI-assisted development tools in engineering workflows; validate generated code, tests, and security implications.

Model-written summary · the original posting is authoritative

First seen Oct 10, 2026 · Last verified Nov 4, 2026 (UTC)