Senior Product Security Engineer — Build Secure DevOps

PayPal; Chicago (IL); Hybrid; USD 131,000 - 194,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

PayPal is seeking a Senior Product Security Engineer to design, build, and operate automated security scanners and guardrails across the software development lifecycle. You will partner with engineering, platform, and security teams to reduce risk across source code, open source dependencies, secrets, software supply chains, AI/LLM tools, and other developer workflows.

Our team aims to make secure development the easiest path for engineers, delivering reliable automation that supports delivery

Qualifications

• 3+ years of relevant experience and a Bachelor’s degree or equivalent combination of education and experience.
• Experience with SLSA, SBOMs, provenance, artifact signing or verification, package repositories, or dependency governance.
• Experience creating or tuning rules for static analysis, secrets detection, or policy-as-code systems.
• Familiarity with AI/LLM development tools, AI-assisted coding, or model and tool supply chains.
• Experience with GCP, Kubernetes, Terraform, and other cloud-native technologies.
• Familiarity with Java/Javascript programming and scripting; ability to troubleshoot code.
• Experience in software engineering, application security, DevSecOps, or cybersecurity; 3–5 years preferred.
• Experience developing security automation in CI/CD or developer workflows (SAST, SCA, or supply chain security).
• Proficiency in Python, Go, and Bash; ability to write, review, and troubleshoot code.
• Understanding secure software development, common vulnerabilities, and remediation approaches.
• Strong communication and collaboration across software, platform, and security teams.

Responsibilities

• Build and operate scanning and guardrail capabilities across source control, CI/CD, and developer platforms.
• Tune SAST, SCA, and supply chain controls; reduce gaps and false positives.
• Write and review code, APIs, detection rules, and automation enforcing security policy.
• Collaborate with developers, platform engineers, and security teams to troubleshoot integrations.
• Evaluate new technical surfaces, including AI/LLM tools, and define appropriate security controls.

Skills

Security engineering

GCP

Kubernetes

Terraform

CI/CD

SAST

SCA

SBOM

AI/LLM tools

Python

Java

JavaScript

Go

Bash

Education

Bachelor’s degree

Tools

GCP

Kubernetes

Terraform

CI/CD tools

Job description

PayPal is seeking a Senior Product Security Engineer to design, build, and operate automated security scanners and guardrails across the software development lifecycle. You will partner with engineering, platform, and security teams to reduce risk across source code, open source dependencies, secrets, software supply chains, AI/LLM tools, and other developer workflows.

Our team aims to make secure development the easiest path for engineers, delivering reliable automation that supports delivery