---
title: 'Senior Security Engineer, Platform Security at Block'
canonical: 'https://feeny.ai/job/senior-security-engineer-platform-security-block-bay-area-ca-united-states-of-vwhqf9rxd552'
type: 'job'
last_seen: '2026-09-14'
---

# Senior Security Engineer, Platform Security at Block

- **Company:** Block
- **Location:** Bay Area CA United States of, United States
- **Compensation:** $185k–$327k
- **Work type:** remote
- **Posted:** 2026-06-02
- **Last confirmed live:** 2026-09-14
- **Apply:** http://block.xyz/careers/jobs/5231316008?gh_jid=5231316008

## Job description

Block builds simple, powerful tools that make progress towards an economy that’s truly open to all.

Each of our brands unlocks different aspects of the economy for more people. Square makes commerce and financial services accessible to sellers. Cash App is the easy way to spend, send, and store money. Afterpay is transforming the way customers manage their spending over time. TIDAL is a music platform that empowers artists to thrive as entrepreneurs. Bitkey is a simple self-custody wallet built for bitcoin. Proto is a suite of bitcoin mining products and services. Together, we’re helping build a financial system that is open to everyone. Join us.

## The Role

The Platform Security team is responsible for securing Block's cloud, compute, and network infrastructure across multiple business units including Square, Cash, and Afterpay.

We discover, track, and enable the business to remediate the most critical security risks across Block's cloud ecosystems (AWS and GCP). We drive the creation of cloud security policy and best practices, measure and aggregate deviations from these policies, and develop capabilities to estimate security risk based on cloud signals and business context. This work drives Block's cloud security strategy and is the lens through which Block measures progress of our cloud security posture over time.

We believe that the secure option should be the easiest option for our users. We're looking for a strong Senior Platform Security Engineer with a deep understanding of securing cloud infrastructure and services at scale to help us execute on this vision.

You Will

- Architect and evolve cloud security guardrails. Design and implement SCPs, GCP org policies, and IAM controls that shape how Block uses cloud infrastructure for years to come.
- Build automation to discover, measure, and contextualize security issues. Develop integrations with CSPM/DSPM tools and internal platforms to surface and prioritize findings.
- Own the cloud security exception lifecycle. Build and maintain the tooling and processes that allow teams to request, review, and track security exceptions at scale
- Partner with platform teams to deliver solutions that permanently eliminate entire categories of cloud security risk.
- Deliver key cloud security assurance functions. Balance the need to remediate critical misconfigurations and sensitive data exposures with being responsible stewards of our developers' time.
- Develop risk-based prioritization. Build data pipelines and dashboards that aggregate security signals and help leadership understand posture trends.
- Respond to and triage cloud security alerts. Support on-call rotations, investigate findings, and help engineers resolve issues quickly.
- Produce quality software that stands the test of time and scales across Block's multi-cloud footprint.
- Think, build and iterate in an AI-augmented environment.

You Have

- 5+ years of experience as a software or security engineer
- 4+ years of experience securing infrastructure running on AWS and/or GCP at scale.
- Deep experience with Infrastructure-as-Code. Terraform (including securing Terraform pipelines), SCPs, GCP org policies, and understanding of best practices and pitfalls when deploying guardrails at organizational scale.
- Experience with cloud security posture management (CSPM) tools such as Wiz, and familiarity with DSPM concepts (sensitive data discovery, classification, and remediation).
- Strong understanding of IAM. AWS IAM policies, roles, SCPs, permission boundaries; GCP IAM, service accounts, and org-level constraints.
- Experience maturing the cloud security posture of large, complex, multi-account/multi-project environments.
- Demonstrated ability to successfully deliver complex, multi-faceted projects from concept to launch.
- Demonstrated fluency with AI-assisted development tools (e.g., Claude Code, Cursor, GitHub Copilot, or similar agentic coding tools) in real production work

Bonus If You Have

- Experience with Kubernetes security (pod security policies, network policies) in environments like EKS or GKE.
- Familiarity with BI and data exploration tools like Looker and Snowflake for building security metrics and dashboards.
- Experience building or operating security exception/risk acceptance workflows at scale.
- Familiarity with cloud networking and network segmentation strategies.
- Ability to work well cross-functionally and communicate with audiences who may not have a security or engineering background.
- Experience supporting multi-business-unit organizations with varying compliance and regulatory requirements.

We’re working to build a more inclusive economy where our customers have equal access to opportunity, and we strive to live by these same values in building our workplace. Block is an equal opportunity employer evaluating all employees and job applicants without regard to identity or any legally protected class. We will consider qualified applicants with arrest or conviction records for employment in accordance with state and local laws and “fair chance” ordinances.

We believe in being fair, and are committed to an inclusive interview experience, including providing reasonable accommodations to disabled applicants throughout the recruitment process. We encourage applicants to share any needed accommodations with their recruiter, who will treat these requests as confidentially as possible. Want to learn more about what we’re doing to build a workplace that is fair and square? Check out our [I+D page](https://block.xyz/news/inclusion).

While there is no specific deadline to apply for this role, U.S. roles are typically open for an average of 55 days before being filled by a successful candidate. Please refer to the date listed at the top of this job page for when this role was first posted.

Block takes a market-based approach to pay, and pay may vary depending on your location. U.S. locations are categorized into one of four zones based on a cost of labor index for that geographic area. The successful candidate’s starting pay will be determined based on job-related skills, experience, qualifications, work location, and market conditions. These ranges may be modified in the future.

To find a location’s zone designation, please refer to this [resource](https://block.xyz/documents/salaryzones.pdf). If a location of interest is not listed, please speak with a recruiter for additional information.

Zone A: $217,800—$326,800 USD

Zone B: $207,000—$310,400 USD

Zone C: $196,100—$294,100 USD

Zone D: $185,200—$277,800 USD

Application Guidelines

Candidates may submit up to 9 active applications within a 60-day period. Reapplications to the same role are accepted 90 days after a previous application has been reviewed.

Use of AI in Our Hiring Process

We may use automated AI tools to evaluate job applications for efficiency and consistency. These tools comply with local regulations, including bias audits, and we handle all personal data in accordance with state and local privacy laws.

Contact us [here](https://privacy.block.xyz/privacyportal/form) with hiring practice or data usage questions.

Every benefit we offer is designed with one goal: empowering you to do the best work of your career while building the life you want. Remote work, medical insurance, flexible time off, retirement savings plans, and modern family planning are just some of our offering. [Check out our other benefits at Block.](https://block.xyz/employee-benefits)

Block, Inc. (NYSE: XYZ) builds technology to increase access to the global economy. Each of our brands unlocks different aspects of the economy for more people. Square makes commerce and financial services accessible to sellers. Cash App is the easy way to spend, send, and store money. Afterpay is transforming the way customers manage their spending over time. TIDAL is a music platform that empowers artists to thrive as entrepreneurs. Bitkey is a simple self-custody wallet built for bitcoin. Proto is a suite of bitcoin mining products and services. Together, we’re helping build a financial system that is open to everyone.

[Privacy Policy](https://block.xyz/en/legal/applicant-privacy-notice)

## About Block

## Company Overview
- **One-liner**: Block, Inc. builds technology for economic empowerment, providing financial services and tools for merchants and consumers through brands like Square, Cash App, Afterpay, Tidal, Bitkey, and Proto.
- **Entity Type**: Public (NYSE: SQ)
- **Headquarters**: Oakland, California, United States
- **Founded**: 2009
- **Founders**: Jack Dorsey, Jim McKelvey, Tristan O’Tierney

## Core Business
- **Primary industry**: Financial services, payments, and financial technology (fintech)
- **Target customers**: B2B (merchants, sellers of all sizes) and B2C (consumers, music listeners, bitcoin users)
- **Mission**: To build simple, powerful tools that make progress toward an economy that’s truly open to all — helping create a financial system that is open to everyone. [block.xyz](https://block.xyz/)

## Products & Services
- **Square**: Point-of-sale system and commerce platform that enables sellers to accept card payments, manage operations (bookings, e-commerce, inventory, payroll, banking), and access business loans. [linkedin.com/company/joinblock](https://www.linkedin.com/company/joinblock)
- **Cash App**: Digital wallet for consumers to send, receive, save, or borrow money; access a debit card; invest in stocks and bitcoin; and file taxes. [linkedin.com/company/joinblock](https://www.linkedin.com/company/joinblock)
- **Afterpay**: Buy now, pay later service that lets customers manage spending over time. [block.xyz](https://block.xyz/)
- **Tidal**: Music streaming platform that empowers artists to thrive as entrepreneurs. [block.xyz](https://block.xyz/)
- **Bitkey**: Simple self-custody bitcoin wallet. [block.xyz](https://block.xyz/)
- **Proto**: Suite of bitcoin mining products and services. [block.xyz](https://block.xyz/)

## Market Standing
- **Valuation/Market Cap**: $96.3 billion (as of 2025/2026, per LinkedIn). [linkedin.com/company/joinblock](https://www.linkedin.com/company/joinblock)
- **Key Metric (Public)**: Annual revenue of $24.2 billion (latest fiscal year). [linkedin.com/company/joinblock](https://www.linkedin.com/company/joinblock)
- **Notable Investors/Partners**: Jack Dorsey (founder, chair, CEO) owns ~10% of the company; other major institutional investors. Key partners include Amazon, Meta, Google (as talent sources). [linkedin.com/company/joinblock](https://www.linkedin.com/company/joinblock)
- **Growth Signals**: Serves 57 million users and 4 million sellers, processing $241 billion in payments annually. Operates in 34 countries. Headcount of 3,223 (though down 25.4% YoY). Active job postings increased 614% quarter-over-quarter (50 open roles). [linkedin.com/company/joinblock](https://www.linkedin.com/company/joinblock)

## Competitive Advantages
- **Ecosystem moat**: Multiple interconnected brands (Square, Cash App, Afterpay, Tidal, Bitkey, Proto) that cross-sell and deepen user engagement across payments, banking, music, and bitcoin.
- **Market leadership**: Dominant U.S. point-of-sale market share and strong consumer adoption of Cash App.
- **Bitcoin & crypto focus**: Early and deep integration of bitcoin (Bitkey wallet, Proto mining, Cash App crypto trading) differentiates Block from traditional fintechs.
- **Distributed work culture**: Allows global talent acquisition and flexible work arrangements that reduce real estate costs and increase employee satisfaction. [block.xyz/employee-benefits](https://block.xyz/employee-benefits)

## Strategic Focus
- Expanding the bitcoin ecosystem through self-custody (Bitkey) and mining infrastructure (Proto).
- Deepening financial inclusion with Cash App (banking, lending, investing) and Afterpay (credit alternatives).
- Growing the Square merchant platform internationally and into larger enterprise accounts.
- Leveraging AI in hiring and operations to improve efficiency and reduce bias. [block.xyz/careers/our-ai-hiring-principles](https://block.xyz/careers/our-ai-hiring-principles)

## Why Work Here
- **Culture**: Block emphasizes a “distributed work” model — employees choose where they work (home, office, hybrid) unless a role requires specific geography. Up to 45 days of international work flexibility across 150+ countries. [block.xyz/employee-benefits](https://block.xyz/employee-benefits)
- **Benefits**: Competitive pay, equity (Employee Stock Purchase Plan at 15% discount), matching 401(k), flexible PTO, comprehensive health/wellness (medical, dental, vision, mental health support), family leave, and family planning support. [block.xyz/employee-benefits](https://block.xyz/employee-benefits)
- **Engineering culture**: AI is used to augment hiring (not replace judgment). Strong emphasis on open source, bitcoin, and building for economic empowerment. Teams work across Square, Cash App, Afterpay, Tidal, Bitkey, and Proto — offering broad career mobility. [block.xyz/careers/our-ai-hiring-principles](https://block.xyz/careers/our-ai-hiring-principles)
- **Remote/Hybrid**: Fully distributed; offices available in Oakland, San Francisco, New York, Melbourne, London, Toronto, and more. [linkedin.com/company/joinblock](https://www.linkedin.com/company/joinblock)
- **Perks**: Employee stock ownership, wellness stipends, career growth programs across the ecosystem.

## Sources
1. [block.xyz](https://block.xyz/)
2. [block.xyz - Careers](https://block.xyz/careers/jobs)
3. [block.xyz - Employee Benefits](https://block.xyz/employee-benefits)
4. [block.xyz - AI Hiring Principles](https://block.xyz/careers/our-ai-hiring-principles)
5. [LinkedIn - Block](https://www.linkedin.com/company/joinblock)

## Other roles at Block

- [B2B Marketing Manager, Content & Social](https://feeny.ai/job/b2b-marketing-manager-content-social-block-bay-area-ca-united-states-of-38tekaaeqzjq) — Bay Area CA United States of, United States
- [Territory Account Executive, New Jersey](https://feeny.ai/job/territory-account-executive-new-jersey-block-newark-nj-united-states-of-vtcg0q9dagje) — Newark NJ United States of, United States
- [Staff Software Engineer, Financial Platform - Issuing](https://feeny.ai/job/staff-software-engineer-financial-platform-issuing-block-melbourne-vp58dn2dv571) — Melbourne, Australia
- [Staff Software Engineer, Financial Platform - Issuing](https://feeny.ai/job/staff-software-engineer-financial-platform-issuing-block-seattle-wa-united-e8qm8drak6jv) — Seattle WA United States of, United States
- [Staff Software Engineer, Financial Platform - Issuing](https://feeny.ai/job/staff-software-engineer-financial-platform-issuing-block-bay-area-ca-united-t4gcqwypax7y) — Bay Area CA United States of, United States
- [Strategic Account Manager, Bilingual (Spanish)](https://feeny.ai/job/strategic-account-manager-bilingual-spanish-block-sacramento-ca-united-states-of-sbbvrjwkrzp3) — Sacramento CA United States of, United States
- [Product GTM Operations Senior Manager](https://feeny.ai/job/product-gtm-operations-senior-manager-block-bay-area-ca-united-states-of-efxq4qnbjef5) — Bay Area CA United States of, United States
- [Product Sales Manager](https://feeny.ai/job/product-sales-manager-block-bay-area-ca-united-states-of-6ax5pt89jpm6) — Bay Area CA United States of, United States
- [Territory Account Executive, Pittsburgh](https://feeny.ai/job/territory-account-executive-pittsburgh-block-pittsburgh-pa-united-states-of-q7mn675x5nxj) — Pittsburgh PA United States of, United States
- [Senior Data Scientist, Risk and Support](https://feeny.ai/job/senior-data-scientist-risk-and-support-block-seattle-wa-united-states-of-w660hdj47kc4) — Seattle WA United States of, United States