Senior GRC Engineer: Data-Driven Security Platforms

Block; California City (CA); On-site; USD 218,000 - 327,000; Full time

Job summary

Block, a company building an inclusive economy, is seeking a GRC/SGE engineer in the Information Security org. You will design data pipelines that aggregate risk signals, implement policy-as-code, and build agentic AI workflows to keep governance auditable and scalable.

You will partner with Compliance, Security, and Platform teams to turn manual processes into products, define technical direction, and help govern Block's AI systems with robust security and reliability practices.

Qualifications

• 7+ years building production software in backend, platform, data, or security engineering.
• Multi-year ownership of a production system, including on-call, SLOs, and the maintenance work that starts after launch.
• Proficiency with at least one of Python, Kotlin, Java, or Go, and comfort reading unfamiliar codebases.
• Hands-on experience building with LLMs (prompting, tool use, agents, or LLM-backed features) and opinions about where model judgment belongs and where it doesn't.
• Experience with integration patterns: REST APIs, webhooks, authentication flows, event-driven architectures.
• Experience pulling, normalizing, and joining data from multiple imperfect sources, and handling the edge cases gracefully.
• Experience defining technical direction where the problem was ambiguous, and carrying it across team boundaries.
• Attention to detail balanced with pragmatism about risk-based prioritization.
• Nice to have: PCI DSS, SOX, SOC 2, ISO 27001, or NIST; Production-scale LLM or agentic systems experience

Responsibilities

• Build and operate the pipelines and integrations that aggregate, normalize, and join risk, control, and asset signals from systems of record across Block.
• Translate security standards and compliance requirements into policy-as-code: enforceable, testable rules that run continuously.
• Design agentic AI workflows that pair LLM reasoning with deterministic, auditable decision layers for evidence analysis, control monitoring, classification, and assessment.
• Build the evals, benchmarks, and calibration harnesses that keep automated governance honest.
• Automate evidence collection and continuous control monitoring to replace point-in-time audit preparation.
• Define the technical approach for ambiguous, cross-team problem spaces. This is an early-stage program, and you will frame problems as often as you solve them.
• Partner with Security Governance Partners, Compliance, and Engineering teams to find the manual processes most worth turning into product.
• Help govern Block's own AI systems: the same platform that automates governance also assesses the autonomy and safety of Block's agents.
• Contribute to technical design discussions, evaluating the security and reliability properties of the platform itself.

Skills

Backend engineering

Production ownership

Python

LLMs experience

REST APIs

Data normalization

Cross-team leadership

Tools

AWS

GCP

Kubernetes

Terraform

CI/CD (Buildkite)

Job description

Block, a company building an inclusive economy, is seeking a GRC/SGE engineer in the Information Security org. You will design data pipelines that aggregate risk signals, implement policy-as-code, and build agentic AI workflows to keep governance auditable and scalable.

You will partner with Compliance, Security, and Platform teams to turn manual processes into products, define technical direction, and help govern Block's AI systems with robust security and reliability practices.