Senior Cybersecurity Engineer

About PayPal

PayPal has influenced the commerce landscape worldwide for over 25 years by delivering innovative, secure, and customer-centric payment solutions. Serving approximately 200 markets, PayPal connects consumers and merchants via a large-scale global network, enabling transactions both online and offline. Its services support diverse funding methods including bank accounts, balances, credit products, credit/debit cards, cryptocurrencies, and more, simplifying funds transfers and payments safely.

Driven by core principles of Inclusion, Innovation, Collaboration, and Wellness, PayPal emphasizes teamwork and customer focus while fostering a wellness-oriented community.

Role Overview

The Offensive Security team at PayPal is pivotal in safeguarding the company’s products, applications, networks, cloud environments, and infrastructure through rigorous security testing. This position uniquely involves manual penetration testing combined with validation of automated findings across multiple technology domains, ensuring vulnerabilities are accurately assessed and effectively addressed.

Key Responsibilities

• Autonomously implement security best practices to enhance system resilience and operational efficiency while aligning with business needs.
• Collaborate with peer engineers and cross-functional teams to push security initiatives and co-lead projects strengthening overall security posture.
• Navigate complex security challenges by innovating on traditional processes and adapting new methodologies.
• Influence team quality and security impact through informed decision-making and continuous improvements.
• Engage with engineering teams to incorporate feedback and evolve security protocols.
• Plan and execute comprehensive penetration tests from scoping to final reporting and support remediation efforts.
• Conduct hands-on security evaluations of web/mobile applications, APIs, network, cloud infrastructures and segmentation.
• Validate AI-assisted and automated security tool findings by reproducing vulnerabilities and determining their exploitability and business implications.
• Develop in-depth understanding of cloud and network architectures, identity management flows, and attacker techniques.
• Leverage AI, machine learning, and automation to enhance testing efficiency and depth.
• Communicate security findings clearly with reproduction steps and realistic attack scenarios, providing actionable remediation advice.
• Support compliance assessments, such as PCI DSS, offering practical remediation guidance.
• Participate in security research and contribute to other Offensive Security team initiatives.

Candidate Requirements

• A Bachelor’s degree or higher in Information Security, Computer Science, or related technical field.
• Minimum five years of practical penetration testing experience, capable of managing assessments end-to-end.
• Proven expertise in one or more penetration testing areas: network, cloud, web, mobile, or thick client technologies.
• Strong familiarity with application/network security principles, cloud environments, identity flows, and the MITRE ATT&CK framework.
• Experience with standard testing methodologies such as PTES and OWASP.
• Proficiency in scripting languages like Python, PowerShell, or Perl.
• Excellent writing, communication, detail orientation, and problem-solving abilities.
• Security certifications such as OSCP, OSCE, OSEE, or GPEN are advantageous.

Additional Information

The role involves close collaboration with multiple teams within PayPal to ensure security is embedded throughout the product lifecycle. The position requires no travel and includes a hybrid work model offering three in-office days and two days remote or office-based.

PayPal is deeply committed to diversity, equity, inclusion, and belonging, ensuring fair opportunity for all applicants regardless of personal characteristics. Reasonable accommodations will be provided for applicants with disabilities.

Candidates should be vigilant against recruitment scams, as PayPal does not charge any fees during the hiring process and communicates only via official email domains.

Employee Benefits

PayPal provides a holistic benefits package focused on physical, emotional, and financial well-being. This includes generous paid leave, comprehensive health coverage for employees and families, and support resources for mental health and financial security.