Senior Product Security Engineer: Secure DevOps Guardrails

PayPal Inc.; Chicago (IL); Hybrid; USD 131,000 - 194,000; Full time

Benefits offered by this job

Balanced hybrid work model

Healthcare coverage

Job summary

PayPal is seeking a Senior Product Security Engineer to design, build, and operate automated security scanners and guardrails across the software development lifecycle. You will partner with engineering, platform, and security teams to reduce risk in source code, dependencies, supply chains, and AI/LLM tools.

The role emphasizes building reliable automation to improve detection and remediation while supporting delivery speed, with impact spanning multiple teams and technologies.

Qualifications

• 3+ years relevant experience and a Bachelor's degree OR any equivalent combination.
• Experience with SLSA, SBOMs, provenance, artifact signing or verification, package repositories, or dependency governance.
• Experience creating or tuning rules for static analysis, secrets detection, or policy-as-code systems.
• Familiarity with AI/LLM development tools and model/tool supply chains.
• Programming or scripting in Python, Go, and Bash; ability to troubleshoot code and secure software development practices.

Responsibilities

• Independently apply security best practices to enhance and optimize systems and align with business objectives.
• Drive security initiatives and co-lead cross-functional projects to strengthen posture.
• Develop, operate, and improve security automation in CI/CD or developer workflows.

Skills

Security engineering

CI/CD security

SAST

SCA

Python

Go

Bash

AI/ML security awareness

Education

Bachelor's degree

Tools

GCP

Kubernetes

Terraform

Java

JavaScript

SBOMs

Job description

PayPal is seeking a Senior Product Security Engineer to design, build, and operate automated security scanners and guardrails across the software development lifecycle. You will partner with engineering, platform, and security teams to reduce risk in source code, dependencies, supply chains, and AI/LLM tools.

The role emphasizes building reliable automation to improve detection and remediation while supporting delivery speed, with impact spanning multiple teams and technologies.