Senior Cloud Security Engineer — AI-Driven Guardrails

Block; California; On-site; USD 140,000 - 190,000; Full time

Job summary

Block is seeking a Senior Platform Security Engineer to secure cloud infrastructure at scale across AWS and GCP, designing guardrails, IAM controls, and policy implementations. You will integrate CSPM/DSPM tooling, manage exception lifecycles with platform teams, and build risk dashboards for leadership insight.

Responsibilities include prioritizing security by data signals, triaging alerts, and delivering scalable software for a multi-cloud footprint in an AI-augmented environment.

Qualifications

• 5+ years of experience as a software or security engineer.
• 4+ years securing infrastructure on AWS and/or GCP at scale.
• Terraform pipelines, SCPs, GCP org policies and guardrails at scale.
• Ability to work across multiple business units and communicate with non-security audiences.

Responsibilities

• Architect and evolve cloud security guardrails. Design and implement SCPs, GCP org policies, and IAM controls.
• Develop integrations with CSPM/DSPM tools and internal platforms to surface findings.
• Own the cloud security exception lifecycle with platform teams.
• Deliver cloud security assurance functions balancing remediation with developers' time.
• Develop risk-based prioritization with data pipelines and dashboards.
• Respond to and triage cloud security alerts; participate in on-call rotations.
• Produce scalable software across Block's multi-cloud footprint.
• Think, build and iterate in an AI-augmented environment.

Skills

Cloud security

AWS

GCP

Terraform

IAM policies

SCPs

CSPM

DSPM

AI tools

On-call

Multi-account environments

Tools

Wiz

Looker

Snowflake

Kubernetes

EKS / GKE

Job description

Block is seeking a Senior Platform Security Engineer to secure cloud infrastructure at scale across AWS and GCP, designing guardrails, IAM controls, and policy implementations. You will integrate CSPM/DSPM tooling, manage exception lifecycles with platform teams, and build risk dashboards for leadership insight.

Responsibilities include prioritizing security by data signals, triaging alerts, and delivering scalable software for a multi-cloud footprint in an AI-augmented environment.