Principal Information Security Engineer

Blackhawk Network•Pleasanton, CA

4d•$189,990 - $323,010•Hybrid

About The Position

Blackhawk Network is hiring the head of Product Security Engineering to join its Global Information Security Team. The role leads and grows the company’s Offensive Security Team and reports directly to the Sr. Director of Product Security. It is based in Pleasanton, California, with remote work and in-office collaboration on Tuesdays and Wednesdays at the Pleasanton headquarters. The position provides technical leadership and Product Security support across Blackhawk Network’s software and payment systems. The successful candidate will help keep corporate and production infrastructure secure and communicate security decisions to engineers and business teams outside the CISO organization. Work includes onboarding applications to product security tools, supporting commercial off-the-shelf and internally built applications, and conducting manual and tool-assisted code reviews.

Requirements

Strong passion for Product Security.
5–15 years of experience working on a security team.
Ability to program or script in at least one language, such as Python Django, Java, JavaScript, BASH, or PowerShell.
Proficiency in reading, writing, and auditing languages such as Java, Ruby, Python, or JavaScript, and ability to learn new languages and technologies.

Nice To Haves

Experience with payment, ecommerce, and FinTech systems.
Experience working in software development.
Certifications such as SANS GIAC, CISSP, ISC2, ISACA, OSCP, or OSCE.
Bachelor’s degree in Computer Science, Electrical Engineering, or related experience.
Curiosity and adaptability with emerging technologies, and experience implementing and using AI tools to improve work, processes, or measurable results.

Responsibilities

Provide Product Security thought leadership across the company.
Deploy and onboard applications on product security tools.
Provide support for product security commercial off-the-shelf and in-house-built applications.
Perform manual and static-analysis-assisted code reviews of applications.
Lead and grow the Blackhawk Network Offensive Security Team.
Communicate security decisions and their impact to engineers and business teams outside the CISO organization.