Senior Software Engineer - Identity and Access Management, Health

Company Description

It all started with an idea at Block in 2013. Initially built to take the pain out of peer-to-peer payments, Cash App has gone from a simple product with a single purpose to a dynamic ecosystem, developing unique financial products, including Afterpay/Clearpay, to provide a better way to send, spend, invest, borrow and save to our 47 million monthly active customers. We want to redefine the world’s relationship with money to make it more relatable, instantly available, and universally accessible.

Today, Cash App has thousands of employees working globally across office and remote locations, with a culture geared toward innovation, collaboration and impact. We’ve been a distributed team since day one, and many of our roles can be done remotely from the countries where Cash App operates. No matter the location, we tailor our experience to ensure our employees are creative, productive, and happy.

Check out our locations, benefits, and more at cash.app/careers.

Job Description

About Health

Cash App has grown rapidly to 70+ million users moving billions of dollars daily. To support this, we are building out Health — a new Platform organization responsible for product experiences aimed at promoting the health of the increasingly complex Cash App ecosystem. Health works to improve Cash App access for our customers, while limiting access for bad or unauthorized users by detecting and preventing improper use across all of our core product areas. The teams under Health creating these mission critical services and products include Identity, Access, Risk Controls and Support Automation. 

We appreciate broad perspectives, a willingness to dive deep, and a readiness to work collaboratively across many disciplines (including product, design, operations, legal, data science, ML).

About Account Security

The Account Security team within Access handles all things authentication, authorization, and device management at Cash. We ensure that our millions of customers can access Cash App safely and reliably while minimizing barriers to entry to the financial system. In addition to refining the core authentication customer experience, we support Cash App’s expansion into new use cases and markets with reliable, well-designed access control primitives that empower engineering teams across the company. 

The Account Security team is also responsible for identifying fraudulent activities and bot attacks to mitigate hacking and prevent account compromise. The team builds tools to collect fraudulent signals, detect fraud patterns, and automatically mitigate attacks. 

As a Software Engineer on Health Access - Account Security, you will: 

• Design, build, and operate the APIs and services that power Cash authentication and authorization
• Contribute to the safety of our customers by ensuring meaningful control over account security
• Develop novel solutions to detect fraudulent activities and mitigate large-scale attacks
• Evolve our architecture to scale with growth in customers and developers, working across large monolith codebases and microservices
• Collaborate with product management and design to develop new, high-impact experiences 
• Build incrementally, test everything, and deploy daily
• Work on the live support rotation to keep our systems running well

Qualifications

You have:

• Bachelor's degree in Computer Science or equivalent work experience
• 5+ years experience building and operating quality software
• Demonstrated technical proficiency on previous projects
• Growth mindset and a healthy comfort with ambiguity
• Strong communication skills and customer empathy

Even better:

• Experience with or interest in product security and authN/authZ standards
• Experience working in large codebases and breaking apart monoliths
• Experience working in a distributed team
• Experience with fraud detection and leveraging various risk signals, such as IP reputation, email age
• Experience with building automated mitigation tools, such as rate limiting, captcha 

Technologies we use and teach:

• Java, Kotlin, Golang
• HTTP, JSON, gRPC, Protocol Buffers
• MySQL, Hibernate, DynamoDB
• Kafka and event-driven architecture
• DataDog, Prometheus
• AWS, Kubernetes

Additional Information

Block takes a market-based approach to pay, and pay may vary depending on your location. U.S. locations are categorized into one of four zones based on a cost of labor index for that geographic area. The successful can