Sr. Staff Engineer, SOC

Blackhawk Network•Pleasanton, CA

21h•$155,770 - $323,010•Hybrid

About The Position

Blackhawk Network is hiring a senior staff-level security engineer to defend its fintech platform against payment fraud, carding attacks, and other financially motivated threats. The role is hands-on and highly technical, with an emphasis on application and cloud security, offensive security assessments, and scalable automation. The engineer will help strengthen fraud defenses, detection strategies, and customer trust. The position embeds security throughout the software development lifecycle, from requirements and design through development and deployment. It also works with cloud engineering teams to secure AWS environments and cloud-native workloads, assesses and prioritizes vulnerabilities, and partners with engineering, DevOps, and product teams to improve security maturity. The engineer will mentor junior engineers and promote a security-first approach. The role follows a hybrid schedule with remote work and in-person collaboration at Blackhawk Network’s Pleasanton headquarters on Tuesdays and Wednesdays. Employment is contingent on successfully completing a background check.

Requirements

At least 7 years of experience in application security, cloud security, or related fields.
Strong background in secure coding practices, API security, and software architecture.
Hands-on experience with SAST, DAST, software composition analysis, and fuzzing platforms.
Solid understanding of AWS services, including IAM, Lambda, S3, and VPC, as well as AWS-native security tooling.
Experience securing containerized and microservice-based environments.
Ability to influence cross-functional teams and communicate effectively with technical and non-technical stakeholders.
Strong problem-solving, analytical, and risk-prioritization skills.
Curiosity and adaptability with emerging technologies, and experience implementing and using AI tools to improve work, processes, or results.

Nice To Haves

Certifications such as CISSP, CSSLP, or AWS Security Specialty.
Familiarity with security standards and frameworks such as OWASP, NIST, and ISO 27001.

Responsibilities

Embed security into the software development lifecycle, including requirements, design, development, and deployment.
Define and promote secure coding practices across engineering teams.
Perform security design reviews, threat modeling, and architecture assessments for applications, APIs, and microservices.
Collaborate with cloud engineering teams to secure AWS environments using tools such as GuardDuty, CloudTrail, Macie, and AWS Config.
Ensure application security controls extend to cloud-native workloads.
Conduct vulnerability assessments using SAST, DAST, and software composition analysis tools.
Analyze security findings, prioritize remediation, and track issues to resolution.
Develop and implement risk mitigation strategies aligned with business needs.
Partner with engineering, DevOps, and product teams to raise security maturity.
Mentor junior engineers and advocate for a security-first mindset.
Use AI tools thoughtfully to enhance work, improve processes, or deliver measurable results.