Senior Network Security Engineer

Block is one company built from many blocks, all united by the same purpose of economic empowerment. The blocks that form our foundational teams — People, Finance, Counsel, Hardware, Information Security, Platform Infrastructure Engineering, and more — provide support and guidance at the corporate level. They work across business groups and around the globe, spanning time zones and disciplines to develop inclusive People policies, forecast finances, give legal counsel, safeguard systems, nurture new initiatives, and more. Every challenge creates possibilities, and we need different perspectives to see them all. Bring yours to Block.

The Role

The Network Security team safeguards Block's global infrastructure by designing, implementing, and monitoring security controls that protect data and services across our hybrid cloud and on-prem environments. We focus on building secure, scalable, and resilient systems while enabling the business to innovate quickly and safely.

As a Senior Network Security Engineer, you will play a critical role in advancing the security of Block's networks. You'll be responsible for architecting, deploying, and maintaining security technologies that defend against evolving threats, while partnering with engineering and operations teams to embed security into core infrastructure. This role requires a strong technical foundation, hands-on expertise in network security, and the ability to lead projects that balance business needs with risk management.

You Will

• Architect, build and deploy network security controls (firewalls, VPNs, IDS/IPS, WAFs, and cloud-native equivalents)
• Secure connectivity across multi-cloud and hybrid environments.
• Automate security operations and infrastructure changes using Infrastructure-as-Code (Terraform, CloudFormation or similar).
• Implement monitoring and observability for network traffic, policies, and anomalies.
• Collaborate with platform teams to embed security into service design and delivery.
• Mentor engineers on cloud-native network security practices and automation.

You Have

• Extensive experience in network security engineering (typically 6+ years).
• Strong foundation in TCP/IP, routing, segmentation, and secure network architecture.
• Hands-on expertise with cloud-native networking and security (AWS/GCP VPC networking, Security Groups, Transit Gateway, service mesh).
• Proficiency in programming/scripting (Python, Go, or similar) for automation, tooling, and integration.
• Proven experience with Infrastructure-as-Code (Terraform, Cloudflormation or similar)
• Familiarity with Kubernetes or container networking, ingress/egress security, and service mesh mTLS.
• Experience integrating security into DevOps workflows and CI/CD pipelines.
• Knowledge of edge security solutions such as WAFs, DDoS mitigation, CDN protections, and API security gateways.
• Strong troubleshooting and communication skills, with the ability to influence across teams.

We're working to build a more inclusive economy where our customers have equal access to opportunity, and we strive to live by these same values in building our workplace. Block is an equal opportunity employer evaluating all employees and job applicants without regard to identity or any legally protected class. We will consider qualified applicants with arrest or conviction records for employment in accordance with state and local laws and "fair chance" ordinances. We believe in being fair, and are committed to an inclusive interview experience, including providing reasonable accommodations to disabled applicants throughout the recruitment process. We encourage applicants to share any needed accommodations with their recruiter, who will treat these requests as confidentially as possible. Want to learn more about what we're doing to build a workplace that is fair and square? Check out our I+D page.

While there is no specific deadline to apply for this role, U.S. roles are typically open for an average of 55 days before being filled by a successful candidate. Please refer to the date listed at the top of this job page for when this role was first posted.