- Hands-on familiarity with application security tools (SAST, DAST, SCA, WAF, Burp Suite).
- Strong programming experience in at least one language such as Ruby, Java, Python, JavaScript, or Swift.
- Knowledge of Kubernetes, Terraform, and version control systems such as Git.
- Hands-on experience with at least one major cloud vendor (AWS, Azure, GCP).
- Strong understanding of authentication and authorization protocols (OAuth 2.0, SAML).
What you need to know about the role
This is a hands-on individual contributor role with cross-organizational scope. You will help set technical direction, lead delivery, and mentor engineers while remaining directly involved in architecture reviews, control design, implementation, and technical problem-solving.
Meet our team
Our mission is to embed security into every phase of the product development lifecycle, recognizing that security promotes quality engineering. We strive to create a culture of security by empowering teams to take responsibility for securing their own code and environments. We do this by providing leaders and engineers with the visibility, tools, guidance, training, and support needed to create secure products and systems. We prevent, identify, and respond to critical vulnerabilities within our ecosystem, driving response to limit potential impact to the business.
Your way to impact
Your work will reduce the likelihood that AI-assisted development introduces exploitable vulnerabilities and that AI-enabled systems misuse sensitive data, tools, or business actions. You will also improve PayPal’s ability to detect, validate, and remediate software vulnerabilities at scale.
Your day-to-day
Your work will vary across hands-on engineering, technical leadership, and cross-functional program delivery. Typical activities may include:
- Reviewing an AI architecture, threat model, or agent workflow and identifying material security risks.
- Designing, prototyping, or integrating an AI security control into a product, shared platform, or engineering workflow.
- Evaluating results from AI security scanners, adversarial tests, and runtime monitoring to determine required engineering action.
- Partnering with developers and platform teams to resolve complex design or implementation issues.
- Analyzing control coverage, effectiveness, adoption, and incident findings to determine program priorities.
- Mentoring engineers and leading technical decisions that span multiple teams or organizational boundaries.
We know the confidence gap and imposter syndrome can get in the way of meeting spectacular candidates. Please don’t hesitate to apply.
Subsidiary
PayPal
Travel Percent
0
PayPal does not charge candidates any fees for courses, applications, resume reviews, interviews, background checks, or onboarding. When making an application directly, we will never ask you to share passwords, one-time passcodes (OTP), or verification codes. Any such request is a red flag and likely part of a scam. All communication regarding your application will come from official PayPal email domains. If you suspect fraudulent activity, please report it immediately. To learn more about how to identify and avoid recruitment fraud please visit https://careers.pypl.com/contact-us.
For the majority of employees, PayPal's balanced hybrid work model offers 3 days in the office for effective in-person collaboration and 2 days at your choice of either the PayPal office or your home workspace, ensuring that you equally have the benefits and conveniences of both locations.