Square builds common business tools in unconventional ways so more people can start, run, and grow their businesses. When Square started, it was difficult and expensive (or just plain impossible) for some businesses to take credit cards. Square made credit card payments possible for all by turning a mobile phone into a credit card reader. Since then Square has been building an entire business toolkit of both hardware and software products including Square Capital, Square Terminal, Square Payroll, and more. We’re working to find new and better ways to help businesses succeed on their own terms—and we’re looking for people like you to help shape tomorrow at Square.

Square's Information Security culture is focused on helping our engineering teams ship secure products. We achieve this by building and deploying state-of-the-art security alongside our product and infrastructure teams.

As an Infrastructure Security Engineer, you will harden Square's on-prem and cloud environments. Your work will radically improve the security posture of Square for years to come.

We're looking for someone with both a broad knowledge of security and Linux systems, and deep knowledge of on-prem and cloud security. You will have had experience across a range of technical disciplines and may have held past roles such as Information Security (Hardening, Detection/Response, Blue Team) and systems (SRE, Linux SysAdmin, Network Engineer). This is a senior role, and we're looking for someone who has experience with a variety of real-world issues.

You will;

• Design and build the security components of the next phase of Square's infrastructure.
• Build security automation for on-prem and cloud environments.
• Work with the compliance and governance teams to implement compliance and security requirements for financial services.
• Work with the infrastructure and product teams who are moving to the cloud, and ensure that they have secure-by-default systems.
• Work in the USA or Canada. Occasional travel to San Francisco may be required.

You have:

• 5+ years total experience in tech.
• Experience working across teams and communicating with audiences who may not have a security background.
• Infrastructure Security experience.
  • At least 2 years of Linux system security experience.
    • Experience securing Linux systems - hardening, logging/detection, general systems design. Emphasis on container security. 
  • At least 2 years of cloud security experience. 
    • Experience with at least one: AWS or GCP
  • Experience implementing on-prem/cloud security and hardening, especially in a complex organization. 
• Security experience
  • Experience designing systems w/ Compliance and Security requirements.
  • Experience writing code to solve security issues. This could be writing security tools or automation/management of security-sensitive environments. 
  • Networking knowledge, including network security and segmentation.

Even better:

• Experience in Python or Ruby.
• Experience in both AWS and GCP.
• Expertise in automation tools such as Terraform, CloudFormation, or Ansible
• Experience working in or with financial services.

• Healthcare coverage
• Retirement Plans
• Employee Stock Purchase Program
• Wellness perks
• Paid parental leave
• Flexible time off
• Learning and Development resources