Senior Offensive Security Engineer - Pen Testing & Cloud

paypal pte. ltd.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

PayPal is seeking an experienced Offensive Security professional to perform hands-on penetration testing across web, mobile, API, and internal infrastructure. You will validate findings, reproduce exploit scenarios, and assess business impact with actionable remediation guidance.

You will work with product, infrastructure, and engineering teams, applying cloud and network security expertise and MITRE ATT&CK knowledge to drive secure development across the lifecycle.

Qualifications

• Bachelor's degree or higher in Information Security, Computer Science, or related discipline.
• At least five years of hands-on penetration testing experience, covering scope to remediation.
• Experience across domains: network, cloud, web, API, mobile, thick client.
• Knowledge of application and network security, cloud environments, identity flows, MITRE ATT&CK.
• Familiarity with PTES and OWASP testing methodologies.
• Scripting ability in Python, PowerShell, or Perl.
• Strong writing and communication skills; ability to present findings and remediation guidance.
• Security certifications (OSCP, OSCE, GPEN, etc.) are a plus.

Responsibilities

• Scope and perform penetration tests from planning through reporting and remediation support.
• Hands-on testing of web, mobile, APIs, and internal infrastructure.
• Network penetration testing and segmentation testing across internal, external, and cloud environments.
• Cloud penetration testing, focusing on configuration weaknesses and IAM issues.
• Reviewly potential vulnerabilities identified via AI-assisted code reviews and tools.
• Reproduce findings, assess exploitability, business impact, and remediation priority.
• Communicate findings with context, steps, and practical remediation guidance.
• Support engineering teams through remediation and closure of findings.

Skills

Penetration testing

Cloud security

Network security

Web application security

Mobile security

Thick client security

Scripting (Python, PowerShell, Perl)

Education

Bachelor's degree or higher in Information Security, Computer Science, or related field

Tools

PTES

OWASP

Job description

PayPal is seeking an experienced Offensive Security professional to perform hands-on penetration testing across web, mobile, API, and internal infrastructure. You will validate findings, reproduce exploit scenarios, and assess business impact with actionable remediation guidance.

You will work with product, infrastructure, and engineering teams, applying cloud and network security expertise and MITRE ATT&CK knowledge to drive secure development across the lifecycle.