P

PayPal

Runs a digital wallet for online payments

Senior Staff Product Security Engineer AI - Cybersecurity Engineering

Security Engineering & ArchitectureConfirmed live in the last 24 hours
Full-time

About the Job

Requirements

  • At least 8 years of relevant experience and a bachelor's degree, or an equivalent combination of education and experience.
  • Hands-on familiarity with application security tools, including static application security testing, dynamic application security testing, software composition analysis, web application firewalls, and Burp Suite.
  • Strong programming experience in at least one of Ruby, Java, Python, JavaScript, or Swift.
  • Knowledge of Kubernetes, Terraform, and version control systems such as Git.
  • Hands-on experience with at least one major cloud vendor: AWS, Azure, or GCP.
  • Strong understanding of authentication and authorization protocols, including OAuth 2.0 and SAML.
  • Deep knowledge of application security vulnerabilities, secure software development practices, and technical controls to identify, prevent, and remediate software risk.
  • Hands-on experience securing AI systems.
  • Strong software-engineering experience building and operating production security tooling, automation, platform services, or developer-facing capabilities.
  • Track record of partnering with developers to implement robust security controls.
  • Strong written and verbal communication skills and ability to influence technical and executive audiences.
  • Experience designing and operating security controls across cloud environments, continuous integration and continuous delivery systems, and diverse application and infrastructure stacks.
  • Experience mentoring and developing engineers.

Responsibilities

  • Independently resolve complex security challenges and provide strategic direction on problem resolution across the security domain.
  • Define methods and procedures for new or special assignments, collaborating with cross-functional teams to drive security initiatives aligned with business needs and objectives.
  • Lead complex, high-impact security projects of diverse scope, applying an in-depth understanding of business trends and security challenges to develop innovative solutions.
  • Drive initiatives that lead to enterprise-wide improvements in security practices and operational efficiency.
  • Define Product Security's technical strategy and roadmap for AI security controls and assurance, partnering with Security Architecture to translate requirements into scalable engineering capabilities.
  • Design, implement, and operate controls for AI-assisted software development, including security review of AI-generated code, security context and constraints for coding agents, automated testing, and risk-based enforcement.
  • Lead security reviews of AI-enabled applications and their models, agents, retrieval systems, data flows, and external tool integrations.
  • Create controls for agent identity, least privilege, tool access, execution isolation, human approval, and interruption of unsafe behavior.
  • Establish security controls for AI models, agents, toolsets, datasets, and pipelines.
  • Define runtime monitoring, auditability, detection, containment, and incident-response requirements for AI systems, including visibility into agent actions, tool calls, and sensitive-data access.
  • Build and scale AI-driven capabilities for vulnerability discovery, validation, prioritization, and remediation.
  • Partner with AI platform and cloud engineering teams to integrate security across AI infrastructure, platforms, and workloads.
  • Establish security criteria for evaluating, onboarding, integrating, and periodically reassessing third-party models, AI services, APIs, and developer tools.
  • Define methods and metrics for evaluating AI security risk, control effectiveness, remediation performance, and program adoption across PayPal.
  • Serve as a senior technical escalation point for complex AI security issues and lead architectural reviews following significant incidents or control failures.
  • Review AI architectures, threat models, and agent workflows to identify material security risks.
  • Design, prototype, or integrate AI security controls into products, shared platforms, or engineering workflows.
  • Evaluate results from AI security scanners, adversarial tests, and runtime monitoring to determine required engineering action.
  • Partner with developers and platform teams to resolve complex design or implementation issues.
  • Analyze control coverage, effectiveness, adoption, and incident findings to determine program priorities.
  • Mentor engineers and lead technical decisions spanning multiple teams or business units.

Desired Qualifications

  • Hands-on familiarity with application security tools, including static application security testing, dynamic application security testing, software composition analysis, web application firewalls, and Burp Suite.
  • Strong programming experience in at least one of Ruby, Java, Python, JavaScript, or Swift.
  • Knowledge of Kubernetes, Terraform, and version control systems such as Git.
  • Hands-on experience with at least one major cloud vendor: AWS, Azure, or GCP.
  • Strong understanding of authentication and authorization protocols, including OAuth 2.0 and SAML.
  • Deep knowledge of application security vulnerabilities, secure software development practices, and technical controls to identify, prevent, and remediate software risk.
  • Hands-on experience securing AI systems.
  • Strong software-engineering experience building and operating production security tooling, automation, platform services, or developer-facing capabilities.
  • Track record of partnering with developers to implement robust security controls.
  • Strong written and verbal communication skills and ability to influence technical and executive audiences.
  • Experience designing and operating security controls across cloud environments, continuous integration and continuous delivery systems, and diverse application and infrastructure stacks.
  • Experience mentoring and developing engineers.

About the Company

PayPal

Runs a digital wallet for online payments

PayPal runs a digital wallet and checkout button that let people pay online stores and send money to friends and family, and merchants of every size add it to their websites and apps. Its peer-to-peer app Venmo became one of the most common ways for Americans to split bills and pay each other back. Shoppers link a bank account, card or balance once and then pay without retyping details, while PayPal charges merchants a fee on each sale and also earns from currency conversion, consumer loans and interest on customer balances. The company was founded in 1998, was owned by eBay from 2002 until a 2015 spin-off, and is based in San Jose, California.

Company size
10,001+
Company stage
IPO
Headquarters
San Jose, CA
Founded
1998

Recently Posted Jobs

Explore more opportunities at PayPal

See more jobs