Senior GRC Engineer - Data-Driven Security Automation

Block; California; Sur place; USD 218 000 - 327 000; Plein temps

Résumé du poste

Block Information Security is seeking a seasoned engineer to build data pipelines, policy-as-code, and agentic AI workflows that scale governance and security across the company. This role emphasizes ownership of production systems, on-call responsibilities, SLOs, and cross‑team collaboration.

You will work with Python/Java/Kotlin/Go, REST APIs, data integration, and LLM-driven tooling while shaping standards and auditable controls in a fast-growing, global environment.

Qualifications

• 7+ years building production software in backend, platform, data, or security engineering.
• Multi-year ownership of a production system, including on-call, SLOs, and maintenance after launch.
• Proficiency with at least one of Python, Kotlin, Java, or Go, and comfort reading unfamiliar codebases.
• Hands-on experience building with LLMs (prompting, tool use, agents, or LLM-backed features) and judgments about model use.
• Experience with integration patterns: REST APIs, webhooks, authentication flows, event-driven architectures.
• Experience pulling, normalizing, and joining data from multiple imperfect sources, handling edge cases gracefully.
• Experience defining technical direction where the problem was ambiguous, and carrying it across team boundaries.
• Attention to detail balanced with pragmatism about risk-based prioritization.

Responsabilités

• Build and operate the pipelines and integrations that aggregate, normalize, and join risk, control, and asset signals from systems of record across Block, including source control, the service registry, identity, ticketing, data platforms, and CI/CD
• Translate security standards and compliance requirements into policy-as-code: enforceable, testable rules that run continuously.
• Design agentic AI workflows that pair LLM reasoning with deterministic, auditable decision layers for evidence analysis, control monitoring, classification, and assessment
• Build the evals, benchmarks, and calibration harnesses that keep automated governance honest
• Automate evidence collection and continuous control monitoring to replace point-in-time audit preparation
• Define the technical approach for ambiguous, cross-team problem spaces. This is an early-stage program, and you will frame problems as often as you solve them
• Partner with Security Governance Partners, Compliance, and Engineering teams to find the manual processes most worth turning into product
• Help govern Block's own AI systems: the same platform that automates governance also assesses the autonomy and safety of Block's agents
• Contribute to technical design discussions, evaluating the security and reliability properties of the platform itself

Connaissances

Python

Java

Kotlin

Go

LLMs

REST APIs

Data integration

Outils

Terraform

AWS

Kubernetes

CI/CD Buildkite

gRPC

JSON

Description du poste

Block Information Security is seeking a seasoned engineer to build data pipelines, policy-as-code, and agentic AI workflows that scale governance and security across the company. This role emphasizes ownership of production systems, on-call responsibilities, SLOs, and cross‑team collaboration.

You will work with Python/Java/Kotlin/Go, REST APIs, data integration, and LLM-driven tooling while shaping standards and auditable controls in a fast-growing, global environment.