Senior Cloud Security Engineer - Scale & AI-Driven

Block; California City (CA); On-site; USD 140,000 - 210,000; Full time

Job summary

Block seeks a Senior Platform Security Engineer to secure cloud infrastructure at scale across AWS and GCP. You will design guardrails, IAM controls, and org policies, while integrating CSPM/DSPM tools and building risk-based dashboards for leadership.

In this role, you will own the cloud security exception lifecycle, balance remediation with developer efficiency, and contribute to a secure, AI-assisted development environment across multiple business units.

Qualifications

• 5+ years as a software or security engineer.
• ~4+ years securing infrastructure on AWS and/or GCP at scale.
• Experience with Terraform pipelines and organizational guardrails.
• Familiarity with CSPM tools (e.g., Wiz) and DSPM concepts.
• Knowledge of IAM policies, roles, and org constraints in AWS/GCP.
• Demonstrated ability to deliver complex, multi-faceted projects.

Responsibilities

• Architect and evolve cloud security guardrails (SCPs, GCP org policies, IAM controls).
• Develop integrations with CSPM/DSPM tools and internal platforms.
• Own cloud security exception lifecycle with platform teams.
• Deliver cloud security assurance functions balancing remediation with developer productivity.
• Build data pipelines and dashboards to show posture trends.
• Respond to and triage cloud security alerts; participate in on-call rotations.
• Produce scalable software for multi-cloud environments.
• Operate in an AI-augmented development environment.

Skills

Cloud security

AWS

GCP

Terraform

SCPs

IAM

CSPM

DSPM

Kubernetes security

AI-assisted tools

Tools

Terraform

Looker

Snowflake

Kubernetes

AWS IAM

GCP IAM

CSPM tools

Job description

Block seeks a Senior Platform Security Engineer to secure cloud infrastructure at scale across AWS and GCP. You will design guardrails, IAM controls, and org policies, while integrating CSPM/DSPM tools and building risk-based dashboards for leadership.

In this role, you will own the cloud security exception lifecycle, balance remediation with developer efficiency, and contribute to a secure, AI-assisted development environment across multiple business units.