Product Security Engineer

What you need to know about the role -

Work on CI integrations, GCP deployments, work on Application security

Meet our team -

This role will work closely with different teams within cyber security and line of business partners building Application security and driving high impact security and technology changes. This role will have opportunities to keep up with current and emerging threats in the industry and latest bleeding edge tech to identify gaps or areas to improve upon in cyber security.a This role is best served with prior experience in cyber security engineering with capability to dive deep into various technologies, have a thirst for being on the cutting edge, and have a passion for security.

• Implement Next Gen platform security products to enable PayPals product development.
• Analyze potential threats and vulnerabilities to our systems, applications, and processes.
• Support the development of new product features by conducting security design reviews, facilitating penetration tests, and contributing to threat models.
• Collaborate with Security Architects, Product Manager, Program Manager and other teams to deliver high quality product.
• Provide consulting and advisement to engineers on best practices, secure coding techniques, and vulnerability remediation.
• Respond to Incidents, includes independently completing root-cause analysis and diagnosis.
• Stay up to date with the latest security trends, technologies, vulnerabilities, and attacks, and incorporate this knowledge into threat models.

• 5+ Years Experience in Application Security, Vulnerability Management Experience.
• Strong hands-on design & development experience with proficiency in at least one of the languages such as Java, Node.js, Python.
• Experience with any of the Application security Tools : SAST, SCA, DAST, API security scanners.
• Working knowledge of Linux, Git, Docker, Kubernetes, Terraform, Maven.
• Experience in identifying and remediating common application security vulnerabilities such as OWASP Top 10 and a deep understanding of web application and mobile app vulnerabilities.
• Experience working with developers to communicate deficiencies and implement security measures.
• Experience building and deploying applications using continuous integration pipelines and automated deployment tools such as Jenkins, Harness, Git Actions .
• Ability to work independently and as part of a team.
• Ability to mentor and guide junior team members.
• Experience with Splunk or similar log management and analysis tools, including the ability to collect, analyse, and visualize large datasets.
  

0