Security Engineer - Network Edge Security

Block•San Francisco, CA

3h•$185,200 - $326,800•Remote

About The Position

Block’s Network Edge Security team builds tools that provide insight into API security posture and the trustworthiness of traffic entering its systems. The team uses machine learning, streaming analytics, and data analysis to understand network-edge risk exposure and request-flow sources, primarily to improve API security for downstream products and services. It also responds to emerging threats by taking action at the network edge. The role works across engineering and operational teams to understand the problem space and monitor solution effectiveness, and calls for flexibility across a broad range of technologies and security domains.

Requirements

At least 5 years of software or security engineering experience developing scalable production software with testing, evaluation, and monitoring.
Bachelor’s degree in Computer Science or equivalent practical experience.
Proficiency in Java, Kotlin, TypeScript, and Python.
Proficiency in data analysis using SQL and Spark.
Experience implementing and maintaining applications in CDN ecosystems, including Cloudflare and Fastly, and in Amazon Web Services (AWS).
Strong passion for network-edge security and knowledge spanning CDNs, analytical tools, network protocols and behavior, and authentication and authorization systems.

Nice To Haves

Significant experience with bot and fraud identification and mitigation systems.
Familiarity with Snowflake, Databricks, and Datadog.

Responsibilities

Respond to and mitigate emerging threats and attacks at the network edge using WAF rules, bot vendors, and other CDN-native technologies.
Build infrastructure to improve inventory of the network-edge security posture.
Build and maintain a near-real-time streaming analytics data pipeline and application.
Contribute to the evolution of labeling and machine-learning model development.
Manage and maintain systems across build, deployment, and production monitoring.
Work with multiple programming languages, including Java, Kotlin, Python, TypeScript, and PySpark, as appropriate.
Evaluate and build integrations with vendor systems alongside in-house solutions.
Develop and implement AI-driven capabilities to automatically classify and mitigate abusive traffic patterns.
Work with engineering and operational teams to understand the problem space and monitor the effectiveness of solutions.