Sr. Staff Engineer, SOC
Blackhawk Network · Pleasanton, CA, US
About this role
## About Blackhawk Network Blackhawk Network (BHN) powers a global platform of branded payment solutions—helping businesses grow revenue, increase loyalty, motivate and reward teams, disburse funds, and engage consumers. Solutions include gift cards, eGifts, corporate payouts, and rewards, delivered through seamless, integrated technology. **Hybrid flexibility:** Remote work with in-person collaboration **Tuesdays and Wednesdays** at BHN’s Pleasanton headquarters. --- ## Role: Sr. Staff Product Security Engineer (SOC) Help defend BHN’s fintech platform against large-scale payment fraud, carding attacks, and other financially motivated threats. You’ll lead offensive security assessments across **transaction systems, authentication flows, and APIs**, with a strong focus on **automation and scalability**. This is a highly technical, hands-on role in a fast-paced, high-stakes fintech environment—your work will directly impact fraud defenses, detection strategy, and customer trust. --- ## Responsibilities - **Application Security Leadership** - Embed security into the SDLC (requirements, design, development, deployment) - Define and promote secure coding practices across engineering teams - Conduct security design reviews, threat modeling, and architecture assessments for applications, APIs, and microservices - **Cloud Security Enablement** - Partner with cloud engineering to secure **AWS** environments - Leverage tools such as **GuardDuty, CloudTrail, Macie, and AWS Config** - Ensure application security controls extend into cloud-native workloads - **Risk Management** - Perform vulnerability assessments using **SAST, DAST, and SCA** - Analyze findings, prioritize remediation, and track to resolution - Develop and implement risk mitigation strategies aligned to business needs - **Collaboration & Mentorship** - Work with engineering, DevOps, and product teams to raise security maturity - Mentor junior engineers and advocate for a security-first mindset --- ## Qualifications - **Deep Application Security Expertise** - Strong background in secure coding, API security, and software architecture - Hands-on experience with **SAST, DAST, SCA, and fuzzing** - **Cloud Security Knowledge** - Solid understanding of **AWS** (IAM, Lambda, S3, VPC) - Experience securing containerized and microservice-based environments - **Leadership & Communication** - Ability to influence cross-functional teams and communicate with technical and non-technical stakeholders - Strong problem-solving, analytical, and risk prioritization skills - **Certifications & Frameworks (preferred)** - CISSP, CSSLP, or AWS Security Specialty - Familiarity with **OWASP, NIST, ISO 27001** - **Experience** - **7+ years** in application security, cloud security, or related fields --- ## AI Tools Expectation We seek candidates who are not only curious and adaptable with emerging technologies, but who have also successfully implemented and utilized **AI tools** to enhance work, improve processes, or deliver measurable results. --- ## Employment & Benefits - **Background check required** - **Salary (California residents only):** $189,990.00 – $323,010.00 - **Salary (Illinois residents only):** $155,770.00 – $264,834.00 - Benefits include **401k match, medical/dental/vision, 12 paid holidays (2026), parental leave, life/disability insurance, flexible spending accounts, wellness benefits, and flexible time off**. --- ## EEO Statement Blackh
Listing freshness
CronJobs last confirmed this listing 59m ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.