This role pays less than
68%
of similar roles. Most pay
$159,000–$216,253
— the shaded band above.
At the midpoint, this role pays about
$162k
versus about
$188k
for comparable roles.
Based on 240 similar postings.
Employer
About PayPal
PayPal is a leading global digital wallet and online payment system, founded in 1998, that allows individuals and businesses to send, receive, and manage funds securely in over 200 markets.
PayPal currently has
74 open roles
on FindRole.
Listed pay typically runs
$160,500–$235,826
across 74 roles with salary data.
As a Senior Product Security Engineer, you will join the security team to protect high-volume payment systems by designing, building, and operating automated security scanners and developer guardrails across the software development lifecycle. You will collaborate with engineering and platform teams to identify and mitigate risks involving source code, open source dependencies, secrets, software supply chains, and AI/LLM tools. Your daily work involves creating reliable automation for detection and remediation, tuning SAST and SCA controls, and developing policy-as-code systems. The role requires proficiency in Python, Go, Bash, Java, and JavaScript, alongside experience with GCP, Kubernetes, and Terraform. You will leverage telemetry to improve tooling performance while addressing complex security challenges within edge environments and developer workflows to ensure secure delivery of payment services across various platforms and technologies.
Design and operate automated security scanners and guardrails across the software development lifecycle.
Identify and mitigate risks in source code, open-source dependencies, secrets, and software supply chains.
Develop and tune SAST, SCA, and policy-as-code systems to catch vulnerabilities before production.
Evaluate and implement security controls for AI/LLM tools and developer workflows.
Write and review code, APIs, and detection rules to enforce security policies.
Use telemetry and metrics to improve the performance and adoption of security tooling.
Partner with engineering teams to troubleshoot integrations and provide practical remediation guidance.
What we're looking for
A Bachelor's degree or an equivalent combination of education and experience is required.
At least 3 years of relevant experience is required.
3 to experience in software engineering, application/product security, DevSecOps, or cybersecurity is preferred.
Proficiency in programming and scripting languages such as Python, Go, Bash, Java, and JavaScript is required.
Experience developing and operating security automation in CI/CD workflows including SAST, SCA, secrets detection, or supply chain security is preferred.
Knowledge of secure software development, common application vulnerabilities, and package ecosystem risks is required.
Experience with GCP, Kubernetes, Terraform, and other cloud-native technologies is preferred.
Familiarity with SLSA, SBOMs, artifact signing, and AI/LLM tool security considerations is preferred.