Senior Platform Security Engineer — Remote Cloud Security & AI

Block; United States; Remote; USD 218,000 - 327,000; Full time

Benefits offered by this job

Remote work option

Medical insurance

Flexible time off

Retirement plans

Job summary

Block is seeking a Senior Platform Security Engineer to secure its cloud infrastructure (AWS/GCP) across multiple brands, including Square and Afterpay. You will design guardrails, automate security workflows, and own the exception lifecycle to scale security across complex, multi-account environments.

You’ll build risk-based dashboards, partner with platform teams, and balance remediation with engineers’ time.

Qualifications

• 5+ years of experience as a software or security engineer.
• 4+ years of experience securing infrastructure running on AWS and/or GCP at scale.
• Deep experience with Infrastructure-as-Code: Terraform, SCPs, GCP org policies.
• Experience with CSPM tools such as Wiz and familiarity with DSPM concepts.
• Strong IAM knowledge: AWS IAM, GCP IAM, org-level constraints.

Responsibilities

• Architect and evolve cloud security guardrails across AWS/GCP implementations.
• Build automation to discover, measure, and contextualize security issues.
• Own the cloud security exception lifecycle at scale.
• Partner with platform teams to eliminate cloud security risks.
• Deliver cloud security assurance functions while minimizing developer impact.
• Develop risk-based prioritization using data pipelines and dashboards.
• Respond to and triage cloud security alerts and support on-call rotations.
• Produce scalable software for multi-cloud environments.
• Think, build, and iterate in an AI-augmented environment.

Skills

Security engineering

AWS/GCP security

Infrastructure as Code

IAM & permissions

Threat hunting

AI-assisted development tools

Tools

Terraform

SCPs

GCP org policies

Wiz

DSPM concepts

Looker/Snowflake

Job description

Block is seeking a Senior Platform Security Engineer to secure its cloud infrastructure (AWS/GCP) across multiple brands, including Square and Afterpay. You will design guardrails, automate security workflows, and own the exception lifecycle to scale security across complex, multi-account environments.

You’ll build risk-based dashboards, partner with platform teams, and balance remediation with engineers’ time.