Embedded Security Engineers specialize in the security concerns surrounding Square’s hardware products, including our readers and custom Android devices like Square Register.  Embedded Security Engineers are involved in all areas of hardware development, from design through firmware development and from prototyping through production manufacturing.  We are looking for smart, motivated engineers who want to build, refine, and occasionally break amazing things with us.  

You will:

• Design, implement, deploy, and maintain security architectures and countermeasures to protect and enable innovative new Square payment devices

• Balance security, compliance, performance, power and cost for a diverse portfolio of embedded devices and the associated manufacturing and backend infrastructure

• Evaluate the security of new product designs to determine vulnerability to a wide variety of attack vectors - and subsequently deploy countermeasures that defend against these attacks

• Be an internal security subject matter expert, advocating for better security practices throughout Square, and driving product security decision making in a collaborative environment

You have two or more of the following:

• Extensive knowledge of firmware and embedded operating system, or mobile operating system (in particular, Android) security principles

• Strong understanding of cryptography, protocol design and analysis

• Experience in reverse-engineering and exploitation of embedded or mobile systems, and design/development of exploit mitigation techniques

• Experience with practical deployment of secure boot implementations, key management, and/or cryptographic architectures for extreme cost- and power-limited solutions

• Professional software development experience in C/C++, Ruby, Python, Go and/or Java

• At least 3 years of experience in the embedded security area.

Even Better:

• Experience taking a hardware product from concept to mass production

• Experience in security testing of mobile or embedded systems, including fuzzing or penetration testing

• Experience in security code review and vulnerability triaging

• Experience in security incident response

• Prior project work involving hardware security modules and device provisioning infrastructure

• Familiarity with physical anti-tamper mechanisms, side-channel attacks, and fault injection attacks

• Experience with payment industry standards or other government and international security standards including those from FIPS, ISO, CC

*This role is open to remote within the USA or Canada*

We’re working to build a more inclusive economy where our customers have equal access to opportunity, and we strive to live by these same values in building our workplace. Block is a proud equal opportunity employer. We work hard to evaluate all employees and job applicants consistently, without regard to race, color, religion, gender, national origin, age, disability, veteran status, pregnancy, gender expression or identity, sexual orientation, citizenship, or any other legally protected class. 

We believe in being fair, and are committed to an inclusive interview experience, including providing reasonable accommodations to disabled applicants throughout the recruitment process. We encourage applicants to share any needed accommodations with their recruiter, who will treat these requests as confidentially as possible. Want to learn more about what we’re doing to build a workplace that is fair and square? Check out our I+D page. 

Additionally, we consider qualified applicants with criminal histories for employment on our team, assessing candidates in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance.

Perks

We want you to be well and thrive. Our global benefits package includes:

• Healthcare coverage
• Retirement Plans
• Employee Stock Purchase Program
• Wellness perks
• Paid parental leave
• Paid time off
• Learning and Development resources

Block, Inc. (NYSE: SQ) is a global technology company with a focus on financial services. Made up of Square, Cash App, Spiral, TIDAL, and TBD, we build tools to help more people access the economy. Square helps sellers run and grow their businesses with its integrated ecosystem of commerce solutions, business software, and banking services. With Cash App, anyone can easily send, spend, or invest their money in stocks or Bitcoin. Spiral (formerly Square Crypto) builds and funds free, open-source Bitcoin projects. Artists use TIDAL to help them succeed as entrepreneurs and connect more deeply with fans. TBD is building an open developer platform to make it easier to access Bitcoin and other blockchain technologies without having to go through an institution.