Senior Staff Product Security Engineer, AI

What you'll do

• Define the technical strategy and roadmap for AI security controls and assurance across all PayPal products.
• Design and implement security controls for AI-assisted software development, including automated testing and risk-based enforcement.
• Conduct security reviews of AI-enabled applications, models, agentic systems, and their associated data flows.
• Build and scale AI-driven capabilities to automate the discovery, validation, and remediation of vulnerabilities.
• Establish security criteria for evaluating and integrating third-party AI models, services, and developer tools.
• Define runtime monitoring, auditability, and incident response requirements for AI systems and agent actions.
• Serve as a senior technical escalation point for complex AI security issues and architectural failures.
• Mentor engineers and lead technical decisions that impact multiple teams and business units.

What we're looking for

• Bachelor's degree or an equivalent combination of education and experience.
• 8+ years of relevant experience.
• Hands-on familiarity with application security tools such as SAST, DAST, SCA, WAF, and Burp Suite (preferred).
• Strong programming experience in at least one language including Ruby, Java, Python, JavaScript, or Swift (preferred).
• Knowledge of Kubernetes, Terraform, and version control systems like Git (preferred).
• Hands-on experience with at least one major cloud vendor such as AWS, Azure, or GCP (preferred).
• Strong understanding of authentication and authorization protocols like OAuth 2.0 and SAML (preferred).
• Experience securing AI systems and building production security tooling (preferred).