Job description
Description
:
Essential Responsibilities:
Independently apply security best practices to enhance and optimize systems, ensuring robust protection and efficiency, while beginning to understand and align security solutions with business objectives.Partner with peers and internal teams to drive security initiatives, contribute to cross-functional projects, and at times co-lead efforts to strengthen security posture.Analyze and resolve security challenges by adapting standard processes and exploring alternative approaches to address complex threats.Influence the quality, efficiency, and effectiveness of the team through informed decision-making, with a potential impact on other teams.Collaborate with other engineers to gather and incorporate feedback, driving continuous improvements in security processes.Minimum Qualifications:
Minimum of 5 years of relevant work experience and a Bachelor's degree or equivalent experience.Preferred Qualification:
Your way to impact:
You are curious about trends in the vulnerability data and propose steps to in the largest risk reduction.
You take you proposals to your teammates, product development teams, and other subject matter resources and develop cross functional action plans.
Your day to day:
Responsibilities will be tailored based on business need, experience, and interest.
In your day-to-day role, you will:
You help drive the operational workflow around application security vulnerabilities
You will determine the impact of vulnerabilities in our environment and communicate them to stakeholders across the company
You will report to the Senior Manager, Threat Exposure Management and provide updates on critical vulnerabilities and overall posture
You love to play detective and find patterns in the data pointing to root causes that unlock mitigation opportunities
You will collaborate across our team and key stakeholders to identify, drive and implement process improvements to reduce the time to detect and mitigate vulnerabilities and increase overall efficiency
You will work with our internal and external service providers/vendors to resolve blockers and maintain high quality service
You will be work with TEM/Product Security leadership to maintain the forward looking roadmap for the team, including defining and monitoring performance against Objectives and Key Results (OKRs), planning for new capabilities, evaluating vendors, and individual career development plans
You have and encourage a passion for cybersecurity and learning through asking questions and experimenting with different approaches
Provide consulting and advisement to software engineers on best practices, secure coding techniques, and vulnerability remediation
Document and automate vulnerability management runbooks
Stay up to date with the latest security trends, technologies, vulnerabilities, and attacks, and incorporate this knowledge into your day to day work
What you need to bring:
At least 5 years of experience in an application security or software development discipline; 2+ years doing this at large enterprise scale
Strong programming experience in at least one language such as Ruby, Java, Python, JavaScript, Swift.
Experience with interpreting the results of vulnerability scanning tools: SAST, API security scanners, software composition analysis
Experience working with developers to communicate deficiencies and implement security measures.
Experience in identifying and remediating common application security vulnerabilities such as OWASP Top 10 and a deep understanding of web application and mobile app vulnerabilities.
Excellent written and verbal communication skills.
Ability to work independently and as part of a team.
Experience with implementing and configuring vulnerability management platforms/application security posture management platforms (for example, Seemplicity, Kenna, Brinqa, Vulcan, ArmorCode)
Excellent written and verbal communication skills.
Familiarity with relevant financial services regulations and security standards, such as PCI-DSS and ISO27001
Ability to operate in fast-paced environment, in a self-driven manner, taking initiative and ownership to propose improvements and solutions
Demonstrate attention to detail, excellent analytical thinking, communication and time management skills
Experience in working with large data sets to determine patterns and drive to key takeaways
Ability to mentor and guide junior team members.
Experience with at least one of the main cloud vendors is a plus (Amazon Web Services, Azure, Google Cloud Platform)
Industry certifications (e.g., CISSP, CISM, CCSP, CSSLP or equivalent) are a plus
Subsidiary:
PayPal
Travel Percent:
0
-
PayPal is committed to fair and equitable compensation practices.
Actual Compensation is based on various factors including but not limited to work location, and relevant skills and experience.
The total compensation for this practice may include an annual performance bonus (or other incentive compensation, as applicable), equity, and medical, dental, vision, and other benefits.
For more information, visit .
The US national annual pay range for this role is $123,500 to $212,850
PayPal does not charge candidates any fees for courses, applications, resume reviews, interviews, background checks, or onboarding.
Any such request is a red flag and likely part of a scam.
To learn more about how to identify and avoid recruitment fraud please visit .
For the majority of employees, PayPal's balanced hybrid work model offers 3 days in the office for effective in-person collaboration and 2 days at your choice of either the PayPal office or your home workspace, ensuring that you equally have the benefits and conveniences of both locations.
Our Benefits:
At PayPal, we’re committed to building an equitable and inclusive global economy.
And we can’t do this without our most important asset—you.
That’s why we offer benefits to help you thrive in every stage of life.
We champion your financial, physical, and mental health by offering valuable benefits and resources to help you care for the whole you.
We have great benefits including a flexible work environment, employee shares options, health and life insurance and more.
To learn more about our benefits please visit .
Who We Are:
to learn more about our culture and community.
Commitment to Diversity and Inclusion
PayPal provides equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, pregnancy, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state, or local law.
In addition, PayPal will provide reasonable accommodations for qualified individuals with disabilities.
If you are unable to submit an application because of incompatible assistive technology or a disability, please contact us at .
Belonging at PayPal:
Our employees are central to advancing our mission, and we strive to create an environment where everyone can do their best work with a sense of purpose and belonging.
Belonging at PayPal means creating a workplace with a sense of acceptance and security where all employees feel included and valued.
We are proud to have a diverse workforce reflective of the merchants, consumers, and communities that we serve, and we continue to take tangible actions to cultivate inclusivity and belonging at PayPal.
Any general requests for consideration of your skills, please .
We know the confidence gap and imposter syndrome can get in the way of meeting spectacular candidates.
Please don’t hesitate to apply.
Required Skill Profession
Computer Occupations