Senior Staff Engineer, SOC

Blackhawk Network•Coppell, TX

4d•Hybrid

About The Position

Blackhawk Network is hiring a Senior Staff Engineer, SOC, to help protect its fintech platform from large-scale payment fraud, carding attacks, and other financially motivated threats. This highly technical, hands-on role involves leading offensive security assessments of transaction systems, authentication flows, and APIs, with an emphasis on automation and scalability. The work contributes directly to fraud defenses, detection strategy, and customer trust. The role leads application security across the software development lifecycle, from requirements and design through development and deployment. It also works with cloud engineering teams to secure AWS environments, assesses and prioritizes vulnerabilities, and partners with engineering, DevOps, and product teams to improve security maturity. The position includes mentoring junior engineers and promoting a security-first mindset. Blackhawk Network values curiosity, adaptability, continuous learning, and thoughtful use of AI tools to improve work and processes. The position offers hybrid flexibility, combining remote work with in-person collaboration at the Coppell, Texas office. Employment is contingent on successfully completing a background check and drug screen.

Requirements

At least 7 years of experience in application security, cloud security, or related fields.
Strong background in secure coding practices, API security, and software architecture.
Hands-on experience with SAST, DAST, SCA, and fuzzing platforms.
Solid understanding of AWS services, including IAM, Lambda, S3, and VPC, and AWS-native security tooling.
Experience securing containerized and microservice-based environments.
Ability to influence cross-functional teams and communicate effectively with technical and non-technical stakeholders.
Strong problem-solving, analytical, and risk-prioritization skills.
Curiosity and adaptability in emerging technologies, and successful use of AI tools to enhance work, improve processes, or deliver measurable results.

Nice To Haves

Relevant certification such as CISSP, CSSLP, or AWS Security Specialty.
Familiarity with security standards and frameworks such as OWASP, NIST, and ISO 27001.

Responsibilities

Embed security into the software development lifecycle, including requirements, design, development, and deployment.
Define and promote secure coding practices across engineering teams.
Perform security design reviews, threat modeling, and architecture assessments for applications, APIs, and microservices.
Collaborate with cloud engineering teams to secure AWS environments using services and tools such as GuardDuty, CloudTrail, Macie, and AWS Config.
Ensure application security controls extend into cloud-native workloads.
Conduct vulnerability assessments using SAST, DAST, and software composition analysis (SCA).
Analyze vulnerability findings, prioritize remediation, and track issues to resolution.
Develop and implement risk mitigation strategies aligned with business needs.
Partner with engineering, DevOps, and product teams to raise security maturity.
Mentor junior engineers and advocate for a security-first mindset.
Lead offensive security assessments targeting transaction systems, authentication flows, and APIs, with a focus on automation and scalability.