Block

2 months ago

Security Engineer, Detection & Response - Monitoring & Triage

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 2 hours agoStatus: Live

Job Summary

Join Block’s Detection and Response Team (DART) to own daily security intake, investigate and resolve threats across endpoints, cloud, identity, and SaaS environments. You will develop automated triage, improve detections, and coordinate cross-team responses across time zones, applying SQL/log analysis, AWS/Kubernetes security, and live response techniques to reduce risk and accelerate containment.

Location: Melbourne

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Key Responsibilities

•Own daily security intake across alert queues, Slack channels, and walk-in escalations, serving as the front door for security ops.
•Investigate and drive end-to-end resolution of security events including endpoint detections, cloud/SaaS alerts, malware, and supply chain issues.
•Pivot across endpoint, identity, cloud, SaaS, network, DNS, and application telemetry to build timelines and assess impact.
•Run nuanced investigations across non-uniform environments with differing device posture and telemetry.
•Turn recurring investigative patterns into durable improvements: create detections, automate triage workflows, and refine escalation paths.

Pay and Benefits

Perks:Remote WorkHealth InsuranceRetirement Savings

Key Requirements

•5+ years of experience in detection and response, incident response, security engineering, or equivalent depth of hands-on investigative experience.
•Strong SQL and log-query/analysis skills; ability to work across large telemetry sets without perfect dashboards.
•Experience leading incidents end-to-end: scoping, containment, evidence collection, impact assessment, stakeholder communication.
•Knowledge of AWS and Kubernetes security fundamentals, cloud-native logging, networking, and Linux systems.
•An engineering mindset to identify detection, workflow, or automation changes to eliminate manual patterns.

Experience:5+ yearsCybersecurity

Skills:Problem-solvingCommunicationTeamworkPrioritizationAnalytical thinking

Languages:English

Tech Stack:AWSKubernetesLinuxSQLLog-analysisLive responseForensics

Company Brief

Block

Builds financial services and commerce tools to empower businesses and individuals, operating products such as Square, Cash App, Spiral (Bitcoin initiatives), TIDAL, and developer-focused payment and banking solutions.

Industry: Fintech Infrastructure

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: San Francisco, United States

Founded: 2009

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Block

2 months ago

Security Engineer, Detection & Response - Monitoring & Triage

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 2 hours agoStatus: Live

Job Summary

Location: Melbourne

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Key Responsibilities

•Own daily security intake across alert queues, Slack channels, and walk-in escalations, serving as the front door for security ops.
•Investigate and drive end-to-end resolution of security events including endpoint detections, cloud/SaaS alerts, malware, and supply chain issues.
•Pivot across endpoint, identity, cloud, SaaS, network, DNS, and application telemetry to build timelines and assess impact.
•Run nuanced investigations across non-uniform environments with differing device posture and telemetry.
•Turn recurring investigative patterns into durable improvements: create detections, automate triage workflows, and refine escalation paths.

Pay and Benefits

Perks:Remote WorkHealth InsuranceRetirement Savings

Key Requirements

•5+ years of experience in detection and response, incident response, security engineering, or equivalent depth of hands-on investigative experience.
•Strong SQL and log-query/analysis skills; ability to work across large telemetry sets without perfect dashboards.
•Experience leading incidents end-to-end: scoping, containment, evidence collection, impact assessment, stakeholder communication.
•Knowledge of AWS and Kubernetes security fundamentals, cloud-native logging, networking, and Linux systems.
•An engineering mindset to identify detection, workflow, or automation changes to eliminate manual patterns.

Experience:5+ yearsCybersecurity

Skills:Problem-solvingCommunicationTeamworkPrioritizationAnalytical thinking

Languages:English

Tech Stack:AWSKubernetesLinuxSQLLog-analysisLive responseForensics

Company Brief

Block

Industry: Fintech Infrastructure

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: San Francisco, United States

Founded: 2009

Website LinkedIn