Sr. Staff Engineer, SOC

Blackhawk Network•Pleasanton, CA

4d•Hybrid

About The Position

Blackhawk Network is hiring a senior staff-level security engineer to help protect its fintech platform from payment fraud, carding attacks, and other financially motivated threats. The role focuses on embedding application security throughout the software development lifecycle, from requirements and design through development and deployment, and on securing applications, APIs, microservices, and cloud-native workloads. The position works closely with cloud engineering, engineering, DevOps, and product teams to assess risks, improve security practices, and strengthen the organization’s security maturity. It includes hands-on vulnerability assessment and remediation, security design reviews, threat modeling, architecture assessments, and mentoring junior engineers. Candidates should be adaptable and curious about emerging technologies and have successfully used AI tools to improve their work, processes, or results. The role offers hybrid flexibility, with focused remote work and in-person collaboration on Tuesdays and Wednesdays at the Pleasanton headquarters. Employment is contingent upon successfully completing a background check.

Requirements

At least 7 years of experience in application security, cloud security, or related fields.
Strong background in secure coding practices, API security, and software architecture.
Hands-on experience with SAST, DAST, SCA, and fuzzing platforms.
Solid understanding of AWS services, including IAM, Lambda, S3, and VPC, and AWS-native security tooling.
Experience securing containerized and microservice-based environments.
Ability to influence cross-functional teams and communicate effectively with technical and non-technical stakeholders.
Strong problem-solving, analytical, and risk-prioritization skills.
Curiosity and adaptability in emerging technologies, and demonstrated successful use of AI tools to enhance work, improve processes, or deliver measurable results.

Nice To Haves

Certifications such as CISSP, CSSLP, or AWS Security Specialty.
Familiarity with security standards and frameworks such as OWASP, NIST, and ISO 27001.

Responsibilities

Embed security into the SDLC, including requirements, design, development, and deployment.
Define and promote secure coding practices across engineering teams.
Perform security design reviews, threat modeling, and architecture assessments for applications, APIs, and microservices.
Collaborate with cloud engineering teams to secure AWS environments using tools such as GuardDuty, CloudTrail, Macie, and AWS Config.
Ensure application security controls extend to cloud-native workloads.
Conduct vulnerability assessments using SAST, DAST, and software composition analysis (SCA).
Analyze assessment findings, prioritize remediation, and track issues to resolution.
Develop and implement risk mitigation strategies aligned with business needs.
Partner with engineering, DevOps, and product teams to improve security maturity.
Mentor junior engineers and advocate for a security-first mindset.