Staff Software Security Engineer, Infrastructure

Company Description

Block is one company built from many blocks, all united by the same purpose of economic empowerment. The blocks that form our foundational teams — People, Finance, Counsel, Hardware, Information Security, Platform Infrastructure Engineering, and more — provide support and guidance at the corporate level. They work across business groups and around the globe, spanning time zones and disciplines to develop inclusive People policies, forecast finances, give legal counsel, safeguard systems, nurture new initiatives, and more. Every challenge creates possibilities, and we need different perspectives to see them all. Bring yours to Block.

Job Description

The Block Security team works with other teams at Block to build world-class products for both customers and employees. Our ultimate goal is to ensure that every single experience with Block is simple, secure, and safe.

Block’s Cryptographic Identity engineering team is responsible for some of the company’s most critical systems. We help protect our customers’ most sensitive data by defining, creating, and distributing secure, verifiable credentials for all entities within Block.

You will:

• Design, implement, and maintain security-oriented software that makes it easier for non-security engineers to build secure products.
• Own the delivery and success of critical identity and PKI services and infrastructure.
• Lead large cross organizational projects building identity primitives that engineering teams across the company can leverage to enable secure communication between services and platforms
• Collaborate with many teams and functions across Block to make technical, design, strategy, and product decisions.
• Act as an internal security subject matter expert, advocating for better security practices throughout Block.
• Provide mentorship and guidance to level up your teammates. 

• Work in any Block office location, or work remotely in the USA or Canada

Qualifications

You have:

• 10+ years of experience as a software and/or security engineer.
• Demonstrated success at delivering complex, cross organizational projects with broad company impact.
• Experience designing, implementing, deploying, and monitoring complex, highly-available, critical production systems.
• Experience with applied cryptography, securing cloud platforms, or identity and authorization systems.
• A high bar for writing scalable, robust, and testable code.
• A strong desire to perform and grow as a security engineer and educate other engineers.

Some of the technologies and platforms we use and teach:

• Go, Rust, Java
• AWS, GCP, datacenter
• SPIFFE
• Service Mesh, Envoy
• AWS Lambda, Fargate, Kubernetes, Docker

We’re active contributors to open-source! Some of the projects we developed or maintain include:

• Certigo: A utility to examine and validate certificates in a variety of formats.
• Certstrap: Tools to bootstrap CAs, certificate requests, and signed certificates.
• Sharkey: a service for managing certificates for use by OpenSSH.
• Ghostunnel: TLS proxy with mutual authentication for securing non-TLS services.
• Go JOSE: An implementation of JOSE standards (JWE, JWS, JWT) in Go
• Keywhiz: a secrets distribution service and its client Keysync.

Additional Information

Block takes a market-based approach to pay, and pay may vary depending on your location. U.S. locations are categorized into one of four zones based on a cost of labor index for that geographic area. The successful candidate’s starting pay will be determined based on job-related skills, experience, qualifications, work location, and market conditions. These ranges may be modified in the future.

Zone A: USD $296,600 - USD $362,500
Zone B: USD $296,600 - USD $362,500
Zone C: USD $296,600 - USD $362,500
Zone D: USD $296,600 - USD $362,500

To find a location’s zone designation, please refer to this resource. If a location of interest is not listed, please speak with a recruiter for additional information. 

Benefits include the following:

• Healthcare coverage
• Retirement Plans including company match 
• Employee Stock Purchase Program
• Wellness programs, including access to mental health,