Lead Detection & Response Security Engineer — Remote

Block, Inc.; California, Northern (MO, KY); Hybrid; USD 207,000 - 310,000; Full time

Benefits offered by this job

Remote work

Medical insurance

Flexible time off

Retirement plans

Job summary

Block, Inc. is seeking a Senior Security Engineer for Detection & Response in the US, focusing on DART and CSIRT work across our products and systems.

You will lead complex investigations, guide containment, coordinate with engineers, Legal, Privacy, and business leaders, and build tools to accelerate response. You'll write code and automation, develop AI-assisted workflows, and mentor responders while owning incident coordination across time zones, contributing to lasting improvements in our

Qualifications

• 6+ years of hands-on incident response and digital forensics.
• Experience commanding major security incidents across multiple teams.
• Strong knowledge of identity, endpoint, cloud, network, or application security; coding or scripting ability.

Responsibilities

• Command complex, high-impact security incidents from initial assessment through containment, recovery, and closure.
• Investigate threats across endpoint, identity, cloud, SaaS, network, and application systems and drive containment and remediation with system owners.
• Reconstruct timelines, preserve evidence, and determine the scope and impact of incidents.
• Coordinate containment and remediation with system owners while balancing urgency and business impact.
• Lead post-incident reviews and drive findings to technical teams and business partners.
• Write code and automation to accelerate evidence collection, analysis, and response.

Skills

Incident response

Digital forensics

Major incident leadership

SQL / database understanding

Python scripting

AI-assisted workflows

Communication

Engineering mindset

Job description

Block, Inc. is seeking a Senior Security Engineer for Detection & Response in the US, focusing on DART and CSIRT work across our products and systems.

You will lead complex investigations, guide containment, coordinate with engineers, Legal, Privacy, and business leaders, and build tools to accelerate response. You'll write code and automation, develop AI-assisted workflows, and mentor responders while owning incident coordination across time zones, contributing to lasting improvements in our