Senior Product Security Engineer: Automate Secure DevOps

PayPal Inc.; Austin (TX); Hybrid; USD 131,000 - 194,000; Full time

Benefits offered by this job

Healthcare coverage

Generous PTO

Equity

Job summary

PayPal is seeking a Senior Product Security Engineer to help secure 439M accounts and $1.8T in annual payment volume by designing, building, and operating automated security scanners and guardrails across the software development lifecycle.

Partnering with engineering, platform, and security teams, you'll identify and reduce risk across source code, open source dependencies, secrets, software supply chains, AI/LLM tools, and other developer workflows.

Qualifications

• 3+ years relevant experience and a Bachelor's degree OR Any equivalent combination of education and experience.
• Experience with SLSA, SBOMs, provenance, artifact signing or verification, package repositories, or dependency governance.
• Experience creating or tuning rules for static analysis, secrets detection, or policy-as-code systems.
• Familiarity with security considerations for AI/LLM development tools, AI-assisted coding, or model and tool supply chains.
• Experience with telemetry/metrics to improve security tooling at scale.

Responsibilities

• Independently apply security best practices to enhance and optimize systems.
• Partner with peers and internal teams to drive security initiatives and co-lead efforts.
• Analyze and resolve security challenges by adapting standard processes and exploring alternatives.
• Influence quality and efficiency of the team through informed decision-making.
• Collaborate with engineers to gather feedback and improve security processes.

Skills

Security best practices

Cross-functional collaboration

Threat analysis

CI/CD security automation

Python/Go/Bash

Telemetry & metrics

SAST/SCA/secrets detection

Education

Bachelor's degree

Tools

GCP

Kubernetes

Terraform

Job description

PayPal is seeking a Senior Product Security Engineer to help secure 439M accounts and $1.8T in annual payment volume by designing, building, and operating automated security scanners and guardrails across the software development lifecycle.

Partnering with engineering, platform, and security teams, you'll identify and reduce risk across source code, open source dependencies, secrets, software supply chains, AI/LLM tools, and other developer workflows.