Sr. Staff Engineer, SOC

Blackhawk Network, Inc.; Pleasanton (CA); Hybrid; USD 190,000 - 323,000; Full time

Benefits offered by this job

401k with employer match

Medical

Dental

Vision

12 paid holidays per year

Sick leave accrual (1 hour per 30 hrs)

Parental leave

Life insurance

Disability insurance

Wellness benefits

Flexible time off

Job summary

Blackhawk Network is hiring a Sr Staff Product Security Engineer to defend our fintech platform against large-scale payment fraud. You will lead offensive security assessments of transactions, authentication, and APIs with a focus on automation and scalability, shaping our fraud defenses and customer trust.

The role is highly technical and hands-on in a fast-paced fintech environment, with hybrid work between remote work and in-office collaboration at our Pleasanton headquarters on Tuesdays and

Qualifications

• Strong background in secure coding practices, API security, and software architecture.
• Hands-on experience with SAST, DAST, SCA, and fuzzing platforms.
• Solid understanding of AWS services (IAM, Lambda, S3, VPC) and AWS-native security tooling.
• Experience securing containerized and microservice-based environments.
• Ability to influence cross-functional teams and communicate effectively with technical and non-technical stakeholders.

Responsibilities

• Embed security into the SDLC, including requirements, design, development, and deployment phases.
• Define and promote secure coding practices across engineering teams.
• Perform security design reviews, threat modeling, and architecture assessments for applications, APIs, and microservices.
• Collaborate with cloud engineering teams to secure AWS environments, leveraging tools like GuardDuty, CloudTrail, Macie, and AWS Config.
• Ensure application security controls extend seamlessly into cloud-native workloads.
• Conduct vulnerability assessments using SAST, DAST, and software composition analysis (SCA).
• Analyze findings, prioritize remediation, and track to resolution.
• Develop and implement risk mitigation strategies aligned with business needs.
• Partner with engineering, DevOps, and product teams to raise security maturity.
• Mentor junior engineers and advocate for a security-first mindset.

Skills

Secure coding practices

API security

Software architecture

Threat modeling

Security design reviews

Leadership & communication

Risk prioritization

Mentoring

Education

CISSP

CSSLP

AWS Security Specialty

Bachelor's degree in a relevant field

Tools

SAST

DAST

SCA

Fuzzing platforms

GuardDuty

CloudTrail

Macie

AWS Config

IAM

Lambda

S3

VPC

Kubernetes

Job description

About Blackhawk Network

Today, through BHN’s single global platform, businesses of all kinds can tap into the world’s largest network of branded payment solutions. BHN helps businesses grow revenue, increase loyalty, motivate and reward their teams, disburse funds and engage consumers. Branded payment solutions include the issuance and distribution of gift cards, egifts, corporate payouts and rewards, along with the technology to deliver these products in seamless, integrated ways. BHN’s network spans the globe with more than 400,000 consumer touchpoints. Learn more at BHN.com.

Hybrid flexibility:At Blackhawk Network, you’ll enjoy the best of both worlds—focused remote work plus in-person collaboration onTuesdays and Wednesdays,our regular in-office days at our Pleasanton headquarters. This rhythm gives you the tools, connection, and autonomy you need to make a real impact.

Overview

We’re hiring a Sr Staff Product Security Engineer to help defend our fintech platform against large-scale payment fraud, carding attacks, and other financially motivated threats. You’ll lead offensive security assessments targeting our transaction systems, authentication flows, and APIs — with a heavy focus on automation and scalability. Your work will directly impact our fraud defenses, detection strategy, and customer trust.

This is a highly technical, hands-on role for someone who thrives in a fast-paced, high-stakes fintech environment.

Responsibilities

Application Security Leadership:

• Embed security into the SDLC, including requirements, design, development, and deployment phases.

• Define and promote secure coding practices across engineering teams.

• Perform security design reviews, threat modeling, and architecture assessments for applications, APIs, and microservices.

Cloud Security Enablement:

• Collaborate with cloud engineering teams to secure AWS environments, leveraging tools like GuardDuty, CloudTrail, Macie, and AWS Config.

• Ensure application security controls extend seamlessly into cloud-native workloads.

Risk Management:

• Conduct vulnerability assessments using SAST, DAST, and software composition analysis (SCA).

• Analyze findings, prioritize remediation, and track to resolution.

• Develop and implement risk mitigation strategies aligned with business needs.

Collaboration & Mentorship:

• Partner with engineering, DevOps, and product teams to raise security maturity.

• Mentor junior engineers and advocate for a security-first mindset.

Qualifications

Deep Application Security Expertise:

• Strong background in secure coding practices, API security, and software architecture.

• Hands-on experience with tools like SAST, DAST, SCA, and fuzzing platforms.

Cloud Security Knowledge:

• Solid understanding of AWS services (IAM, Lambda, S3, VPC) and AWS-native security tooling.

• Experience securing containerized and microservice-based environments.

Leadership & Communication:

• Ability to influence cross-functional teams and communicate effectively with technical and non-technical stakeholders.

• Strong problem-solving, analytical, and risk prioritization skills.

Certifications & Frameworks:

• Relevant certifications such as CISSP, CSSLP, or AWS Security Specialty preferred.

• Familiarity with security standards and frameworks (OWASP, NIST, ISO 27001).

Experience: 7+ years of experience in application security, cloud security, or related fields.

We seek candidates who not only demonstrate curiosity and adaptability in emerging technologies but have also successfully implemented and utilized AI tools to enhance their work, improve processes, or deliver measurable results. Our teams embrace continuous learning and the thoughtful integration of AI to create meaningful impact – for our employees and the future of work.

Employment is contingent upon the successful completion of a background check.

Benefits

Salary Range for California Residents Only: $189,990.00 to $323,010.00

Salary Range for Illinois Residents Only: $155,770.00 to $264,834.00

Pay is based on several factors including but not limited to education, work experience, certifications, etc. In addition to your salary, Blackhawk Network offers benefits including 401k with employer match, medical, dental, vision, 12 paid holidays in the year 2026, 1 hour of sick pay accrual for every 30 hours worked, parental leave, life insurance, disability insurance, accident and illness insurance, health and dependent care flexible spending accounts, wellness benefits, and flexible time off for all full-time employees.

EEO Statement

Blackhawk Network provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. Blackhawk Network believes that diversity leads to strength. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.

Blackhawk Network encourages applicants with previous criminal records to apply to all positions and, pursuant to the San Francisco and Los Angeles Fair Chance Acts (and other “Fair Chance” laws), Blackhawk Network will consider for employment qualified applicants with arrest and conviction records. For Philadelphia applicants or jobs, please see a copy of Philadelphia’s ordinance on this topic by clicking this link: https://codelibrary.amlegal.com/codes/philadelphia/latest/philadelphia_pa/0-0-0-280104.