Senior Software Security Engineer, Block
Product
$168.3-297k
Salary dependent on location. Plus Employee Stock Purchase Program
Financial services ecosystem
Open for applications
Financial services ecosystem
1001+ employees
Open for applications
$168.3-297k
Salary dependent on location. Plus Employee Stock Purchase Program
1001+ employees
Company mission
To create better tools to help everyone access the economy.
Role
Who you are
- 8+ years of relevant experience
- Experience demonstrating technical initiative and leadership through the end-to-end delivery of products in the security space
- You enjoy solving problems at scale, through hands-on problem solving
- Strong desire to perform and grow as a security engineer and educate other engineers
- An interest in working on a product that impacts people/businesses directly
- You have an aptitude for applied cryptography, security, and strong software engineering fundamentals
What the job involves
- At Cash, security is everyone’s responsibility, especially among engineering disciplines
- Cash Security is a multidisciplinary team, closely aligned to the needs of the business
- The team is composed of multiple engineering and governance teams, each specializing and collaboratively solving the security, privacy and governance needs alongside their partner organizations
- The Product Security engineering team focuses on protecting Cash App’s customer data throughout the product engineering’s technology stacks
- We are a hands-on, engineering-driven security team, which aligns security engineers toward product teams, across the entire Cash App organization
- We continually raise the overall trust of Cash App’s products by building high leverage security abstractions into the technology stacks our partners utilize
- We collaborate on building these security infrastructures, design patterns, and guidelines
- We accomplish our goals by treating security engineering as a discipline, offering our expertise to technical and non-technical stakeholders
- We secondarily abstract bespoke security solutions into reusable infrastructure, sharing our learnings, best practices, and solutions across the organization
- Our mission is to empower Cash engineers to protect our customers’ data in every aspect of the product and data life cycle; by providing reusable primitives and scalable platforms
- Work with product teams to threat-model Cash App features and identify vulnerabilities
- Design, build, and own the security & privacy mechanisms and features which support product engineering teams and customer operations
- Drive the direction of the organization by productionizing common security patterns and working toward our security roadmap
- Design, apply, and develop security primitives to protect data
- Identify and remedy potential security risks to our customers' data
- Partner with product teams to implement relevant regulatory data privacy considerations
- Help the engineers around you level-up on their own security reasoning and knowledge
- Examples of our previous work include:
- CashApp’s open source mobile client security SDK [GitHub]
- General purpose multi-party authorization framework
- Context aware audit logging functionality
- Drive the adoption of policy as code
- Cash’s Field Level Encryption (FLE) framework [Blog]
Our take
Block is a financial services technology company comprising of Square, Cash App, Spiral, TIDAL, and TBD. Its biggest brand, Square, offers hardware and software for small to medium-sized businesses enabling them to manage the entire payment lifecycle. It functions similarly to Shopify and Stripe, but has paired online payment processing with physical devices such as registers, payment terminals, and mobile card readers.
The business was originally founded as Square in 2009 by Jack Dorsey of Twitter fame. Already well-established with SMEs all over the globe, Square has significantly benefited from the increased demand for mobile payment systems. Its order management feature remains a go-to tool for small businesses that otherwise didn't have the proper infrastructure in place when demand for home delivery surged.
Square rebranded as Block in December 2021, with the Square brand name remaining in place for their seller business. The company has since come under fire for its security practices, facing lawsuits in relation to a major breach of CashApp user data, and in 2024 announced plans to reduce its workforce in order to cut costs. Despite these setbacks, there is every chance the business will move past this, though it may take some time to rebuild trust in its product.
Kirsty
Company Specialist
Insights
Few candidates hear
back within 2 weeks
19% employee growth in 12 months
Company
Company benefits
- Healthcare coverage (Medical, Vision and Dental insurance)
- Health Savings Account and Flexible Spending Account
- Retirement Plans including company match
- Employee Stock Purchase Program
- Wellness programs, including access to mental health, 1:1 financial planners, and a monthly wellness allowance
- Paid parental and caregiving leave
- Paid time off (including 12 paid holidays)
- Paid sick leave (1 hour per 26 hours worked (max 80 hours per calendar year to the extent legally permissible) for non-exempt employees and covered by our Flexible Time Off policy for exempt employees)
- Learning and Development resources
- Paid Life insurance, AD&D, and disability benefits
Company HQ
SoMa, San Francisco, CA
Articles
Leadership
Jack Dorsey
(CEO)Having studied at and dropped out of New York University, Jack founded Twitter in March 2006, where he has served as CEO since. He co-founded Square with Jim in February 2009, and has remained its CEO ever since.
Share this job
View 119 more jobs at Block