Senior Software Engineer - Product Security

Plaid Inc; San Francisco (CA); On-site; USD 120,000 - 150,000; Full time

Job summary

Plaid Inc is seeking a Product Security Engineer to join our Product Security team. This role involves designing and implementing security solutions to enhance Plaid's products and develop maintainable software aimed at improving security posture while facilitating easier integration of security controls for developers.

Ideal candidates should have a strong background in building production services, knowledge of cloud infrastructure, and a passion for educating others on security practices.

Qualifications

• Experience in developing maintainable and secure software.
• Knowledge of security, privacy, usability, scalability.
• Experience designing distributed systems with performance focus.

Responsibilities

• Lead, design and develop security capabilities.
• Build solutions for vulnerability lifecycle management.
• Develop internal tooling for automating vulnerability detection.
• Communicate effectively regarding project deliverables.
• Identify and address security vulnerabilities proactively.

Skills

5 + years of professional experience

Ability to architect and build software systems

Building systems related to vulnerability management

Experience with AWS, Kubernetes, Terraform

Job description

The Product Security team is responsible for managing the security processes, policies and controls to secure Plaid’s developer and consumer facing products. The product security team is focused on areas like Application Security, Vulnerability Management, Secure Development Lifecycle, Penetration Testing and Cloud Security. We build the services and components that protect Plaid’s products. We move security 'left' by engineering common libraries, modules, and workflows that make the secure path the easiest path for all Plaid engineers.

Plaid is looking for a Product Security Engineer who is a builder to join our Product Security team.

The Role

• You will lead, design and develop security capabilities to manage vulnerabilities lifecycle and automate workflows to reduce KTLO toil.
• You will own, maintain, and build Plaid’s VM Orchestration service and build solutions to eliminate the entire vulnerability classes.
• You will also partner with product and engineering teams to architect and build security controls to make our products even more secure.
• You will consult with product engineers to ensure Plaid services meet security standards.
• You will help educate and support other engineering teams to improve security in their own products and services.
• You will assist with Plaid’s incident response and security awareness programs.
• You will collaborate with other security platform members and build necessary engineering solutions to meet their needs.

Responsibilities

• Build the secure engineering foundations that secure the future of digital finance.
• Develop maintainable and secure software to enhance Plaid's security posture and create paved roads for developers for easy and default integration of security controls.
• Design, develop, and maintain security-critical services and components.
• Develop internal tooling to automate vulnerability detection, dependency management, and remediation workflows within the CI/CD pipeline.
• Replace manual security gates with engineered solutions that allow product teams to ship faster and more securely.
• Communicate effectively with managers and team members regarding project deliverables and progress.
• Design and implement technical solutions that align with the evolving needs of the business.
• Proactively identify and address security vulnerabilities in products and services.
• Actively participate in incident response and security awareness initiatives.

Qualifications

• 5 + years of professional experience building and scaling production services
• Ability to architect and build software systems to meet security, privacy, usability, scalability and cost requirements.

Additional Qualifications

• Experience building systems or services related to vulnerability management, data encryption, key management, secret management, user authentication, service authentication, authorization systems, and security policy enforcement.
• Experience designing distributed systems and microservices with a focus on performance and reliability.
• Familiarity with modern cloud infrastructure (AWS, Kubernetes, Terraform) and how to integrate security controls into them.
• A passion for creating tools and libraries that other engineers love to use.
• Passionate about educating others on security and privacy.

Equal Opportunity

Plaid is proud to be an equal opportunity employer and values diversity at our company. We do not discriminate based on race, color, national origin, ethnicity, religion or religious belief, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, military or veteran status, disability, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state, and local laws. Plaid is committed to providing reasonable accommodations for candidates with disabilities in our recruiting process. If you need any assistance with your application or interviews due to a disability, please let us know at [e-mail].