remote
Senior Security Engineer, Security Engineering & Operations - Block
Security Engineer
Lead security initiatives across the platform, driving incident response, cloud hardening, and DevSecOps practices to protect critical systems and data.
About the role
Key Responsibilities
- Design, implement, and maintain security controls for cloud and on‑prem environments, ensuring compliance with industry standards.
- Lead incident response efforts, coordinating cross‑functional teams to investigate, contain, and remediate security events.
- Develop and enforce secure coding and deployment pipelines, integrating automated security testing into CI/CD workflows.
- Conduct regular vulnerability assessments, penetration tests, and threat modeling to identify and mitigate risks.
- Collaborate with product, platform, and infrastructure teams to embed security best practices into new features and services.
Requirements
- 5+ years of experience in security engineering, with a strong focus on cloud security and incident response.
- Proficiency with AWS security services (IAM, GuardDuty, Security Hub, etc.) and experience with IaC security tools.
- Hands‑on experience with vulnerability scanning, penetration testing, and threat modeling frameworks.
- Excellent communication skills and ability to influence stakeholders across technical and non‑technical domains.
- Relevant certifications (CISSP, CEH, AWS Security Specialty) are a plus.