Description
The Offensive Security team at PayPal helps protect the company's products, applications, networks, cloud environments, infrastructure, and emerging technologies. You will review findings from AI-assisted code reviews and other automated security tools, reproduce potential vulnerabilities, and assess their exploitability and business impact. You will also perform targeted manual testing and secure code reviews to identify complex issues.
Essential Responsibilities:
- Independently apply security best practices to enhance and optimize systems
- Partner with peers and internal teams to drive security initiatives
- Analyze and resolve security challenges by adapting standard processes
- Influence the quality, efficiency, and effectiveness of the team
In your day-to-day role you will be responsible for:
- Scoping and performing penetration tests from planning through reporting and remediation support
- Performing hands-on testing of web applications, mobile applications, APIs, and internal infrastructure
- Reviewing and validating potential vulnerabilities identified through AI-assisted code reviews and other automated security tools
- Reproducing findings and assessing exploitability, business impact, severity, remediation priority, and whether a finding is a false positive
What do you need to bring:
- Bachelor's degree or higher in Information Security, Computer Science, or a related technical discipline
- At least five years of hands-on penetration testing experience
- Strong hands-on experience across one or more penetration testing domains
- Knowledge of application and network security, cloud environments, identity flows, and the MITRE ATT&CK framework
- Experience with testing approaches such as PTES and OWASP
- Proficiency in at least one scripting language
Benefits:
- Comprehensive, choice-based programs to support all aspects of personal wellbeing
- Generous paid time off
- Healthcare coverage for you and your family
- Resources to create financial security and support your mental health