Technical Lead, Platform Security

Block is one company built from many blocks, all united by the same purpose of economic empowerment. The blocks that form our foundational teams — People, Finance, Counsel, Hardware, Information Security, Platform Infrastructure Engineering, and more — provide support and guidance at the corporate level. They work across business groups and around the globe, spanning time zones and disciplines to develop inclusive People policies, forecast finances, give legal counsel, safeguard systems, nurture new initiatives, and more. Every challenge creates possibilities, and we need different perspectives to see them all. Bring yours to Block.

The Role

Platform Security at Block is a critical function focused on fortifying the foundational layers of our infrastructure. It spans three specialized teams: Compute Security, Cloud Security, and Network Security. These teams secure the foundational platform services that power Block's major businesses, ensuring robust, scalable, and resilient infrastructure across all environments.

As Technical Lead, Platform Security, you will provide strategic and hands-on technical leadership across these domains. You'll set architectural direction, identify and mitigate security risks at scale, and work closely with engineering and infrastructure partners to uplift Block's security posture across our rapidly evolving environments. You'll play a key role in aligning teams around a shared security vision, supporting consistency in approach while empowering teams to work independently with clarity and shared understanding. You'll help invent creative, resilient solutions purpose-built for the complexity of our infrastructure.

This is a high-impact leadership role for a deeply technical engineer with strong experience in security, infrastructure, and cross-functional collaboration. The ideal candidate combines deep expertise with sound judgment, adaptability, and a willingness to navigate complex tradeoffs. You'll play a key role in helping us strike the right balance between security and velocity, enabling teams to move fast, safely.

You Will

• Shape Strategy and Architecture: Set the long-term vision and technical strategy for Compute, Cloud, and Network Security. Ensure architecture aligns with industry best practices for security, scalability, and resilience.
• Be a Security Engineering Thought Leader: Act as a go-to expert in areas such as network segmentation, secure CI/CD pipelines, cloud-native controls, and workload isolation. Help teams evaluate tradeoffs and make informed decisions that reflect both security risk and business context.
• Collaborate Across Functions to Build Shared Security Models: Partner with infrastructure, security engineering, and application teams to define secure-by-default patterns and frameworks across all environments. Foster a culture of enablement and shared responsibility.
• Help Design and Support Secure Platforms: Oversee the design and build of secure compute and network platforms that empower developers without compromising security. Champion automation-first approaches to eliminate whole classes of risk.
• Promote Consistency and Scale Through Shared Practices: Define and promote scalable security standards, reusable components, and best practices across Block's diverse ecosystem. Be pragmatic about what to centralize, standardize, or decentralize.
• Partner Across Security and Risk Functions: Collaborate with Detection & Response to inform infrastructure threat detection with platform-level insights. Support Compliance and Governance teams in meeting regulatory and internal requirements, ensuring audit-ready, secure infrastructure.
• Mentor and Elevate Engineering Talent: Provide technical mentorship across teams. Cultivate a culture of ownership, curiosity, and engineering excellence with a security-first, but not security-only, mindset.

You Have

• Technical Leadership in Security Engineering: A proven track record of driving architectural decisions and influencing platform security direction at scale in large, complex environments.
• Expertise Across Domains: Deep experience in at least two of the following: network security (e.g., segmentation, firewalling, transit layer protections), cloud security (e.g., GCP/AWS IAM, service boundaries), or compute security (e.g., secure build systems, hardened Kubernetes).
• Infrastructure and Platform Fluency: Strong understanding of cloud infrastructure (GCP, AWS), container orchestration, identity and access management, and service mesh patterns.
• Modern Security Approach: Familiarity with Zero Trust architectures