Senior Product Security Engineer

PayPal

Confirmed live yesterday High trust
Hybrid

Quick summary

Work type
Hybrid
Location
Austin, TXChicago, IL
Salary
$130,500–$193,600 / yr
Posted
5 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $188k
This role $162k
$120k most similar roles pay here $231k

This role pays less than 68% of similar roles. Most pay $159,000–$216,253 — the shaded band above. At the midpoint, this role pays about $162k versus about $188k for comparable roles.

Based on 240 similar postings.

Employer

About PayPal

PayPal is a leading global digital wallet and online payment system, founded in 1998, that allows individuals and businesses to send, receive, and manage funds securely in over 200 markets.

PayPal currently has 74 open roles on FindRole.

Listed pay typically runs $160,500–$235,826 across 74 roles with salary data.

Most-posted roles

View all roles at PayPal

At a glance

TL;DR · Senior Product Security Engineer

As a Senior Product Security Engineer, you will join the security team to protect high-volume payment systems by designing and operating automated security scanners and developer guardrails across the software development lifecycle. You will collaborate with engineering and platform teams to identify and mitigate risks involving source code, open-source dependencies, secrets, software supply chains, and AI/LLM tools. Your daily work involves building reliable automation for CI/CD pipelines, tuning SAST and SCA controls, and developing detection rules to ensure secure development is the easiest path for engineers. The role requires proficiency in Python, Go, Bash, Java, and JavaScript, alongside experience with GCP, Kubernetes, and Terraform. You will address complex security challenges by integrating telemetry and metrics to improve tool performance while ensuring robust protection across edge environments and various developer workflows.

What you'll do

  • Design and operate automated security scanners and guardrails across the software development lifecycle.
  • Identify and mitigate risks in source code, open-source dependencies, secrets, and software supply chains.
  • Develop and tune SAST, SCA, and policy-as-code systems to catch vulnerabilities before production.
  • Evaluate and implement security controls for AI/LLM tools and developer workflows.
  • Write and review code, APIs, and detection rules to enforce security policies.
  • Use telemetry and metrics to improve the performance and adoption of security tooling at scale.
  • Partner with engineering teams to troubleshoot integrations and provide practical remediation guidance.

What we're looking for

  • Bachelor's degree or an equivalent combination of education and experience.
  • 3 to relevant experience in software engineering, application or product security, DevSecOps, or cybersecurity.
  • Proficiency in programming and scripting in multiple languages including Python, Go, Bash, Java, and JavaScript.
  • Working knowledge of secure software development, common application vulnerabilities, and dependency/package ecosystem risks.
  • Experience developing or operating security automation in CI/CD workflows, including SAST, SCA, secrets detection, or supply chain security.
  • Experience with GCP, Kubernetes, Terraform, and other cloud-native technologies.
  • Experience with SLSA, SBOMs, provenance, artifact signing, or dependency governance (preferred).
  • Familiarity with security considerations for AI/LLM development tools and associated supply chains (preferred).

More like this

Similar roles

Senior Product Security Engineer

PayPal

Austin, TX +1 5 days ago $130,500$193,600
SAST SCA CI/CD Python Go Bash Java JavaScript GCP Kubernetes Terraform SLSA SBOM Policy-as-Code Security Automation DevSecOps Secrets Detection
3+ yrs exp Hybrid

Senior Product Security Engineer

Cloudflare, Inc

Austin, TX 55 days ago
Product Security Application Security AI LLM Threat Modeling STRIDE Vulnerability Management SAST Fuzzing Penetration Testing Bug Bounty JIRA Agile SaaS Distributed Systems
Hybrid

Senior Product Security Engineer

Adobe

San Jose, CA 11 days ago $180,600$261,450
OWASP Top 10 CVSS v3.1 Burp Suite Python PowerBI JIRA REST API OAuth2 AWS Lambda API Gateway SQL Injection XSS SSRF IDOR SOAR Webhooks curl DevTools
5+ yrs exp

Senior Security Engineer I, Product Security

Oscar Health

Tempe, AZ 11 days ago
SAST DAST SDLC Vulnerability Management Code Review AI Integration Model Context Protocol (MCP) Software Development Risk Assessment Source Code Review
4+ yrs exp Hybrid

Senior Software Engineer, Product Security

Plaid

San Francisco, CA 67 days ago $204,156$281,196
Application Security Vulnerability Management Secure Development Lifecycle Cloud Security Penetration Testing CI/CD AWS Kubernetes Terraform Microservices Distributed Systems Data Encryption Key Management Secret Management User Authentication Authorization Security Policy Enforcement
5+ yrs exp

Senior Software Engineer, Product Security

Plaid

New York, NY +2 67 days ago $204,156$281,196
Application Security Vulnerability Management Secure Development Lifecycle Cloud Security CI/CD AWS Kubernetes Terraform Microservices Distributed Systems Data Encryption Key Management Secret Management User Authentication Service Authentication Authorization Systems Security Policy Enforcement
5+ yrs exp