1 day ago
Bengaluru, IndiaStaff+
Responsibilities
- Design and build a unified API security capability covering API linting, gateway traffic visibility, shadow-API detection, and schema security checks.
- Ship the pre-release API security gate and enforce gateway-level hard-block policies through the shared policy-as-code architecture.
- Own the DAST tooling evaluation, production migration decision, and implementation.
- Extend API security controls to pipeline access and execution control and systemic artifact consumption verification.
- Provide staff-level technical leadership through architecture, design reviews, on-call and escalation support, sustaining engineering, and maintenance.
- Mentor engineers, unblock initiatives, influence cross-team security programs, and shape the team roadmap with engineering leadership.
Requirements
- Five or more years of relevant experience and a bachelor’s degree, or an equivalent combination of education and experience.
- Five or more years building production software with staff-level end-to-end ownership of a platform or system and hands-on Python or Go coding experience.
- Deep hands-on knowledge of REST, GraphQL, AsyncAPI, OAuth2 scopes, token and session models, and API gateway or service-mesh internals such as Envoy-class systems.
- Working knowledge of AI-driven API abuse, agent-to-API authentication, and the security implications of agentic commerce.
- Fluency in policy-as-code security enforcement and CI/CD security gating, including the ability to write enforcement policies.
- Practical understanding of DAST and SAST tooling internals and experience evaluating or replacing security tools.
- Knowledge of product, cloud, and vulnerability-management security fundamentals, the OWASP API Security Top 10, API abuse patterns, rate limiting, bot and abuse mitigation, WAF/API gateway policy, mutual TLS, and API discovery and inventory practices.
- Ability to provide technical leadership, mentor engineers, influence stakeholders, and drive complex security initiatives.
Benefits
- Balanced hybrid work model with three days in the office and two days at the PayPal office or home workspace for most employees.
- Generous paid time off, healthcare coverage for employees and families, financial-security resources, and mental-health support.
- Inclusive and equitable work culture focused on personal wellbeing and belonging.
- No travel is required; listed travel percentage is 0%.
About PayPal
PayPal builds digital payments platforms for consumers and merchants, including PayPal, Venmo, and Xoom, supporting online, in‑app, and in‑person checkout and peer‑to‑peer transfers. It earns primarily from transaction and merchant processing fees, plus value‑added services such as risk management and branded credit. Founded in 1998 and headquartered in San Jose, California, PayPal operates in roughly 200 markets and is a public company traded on NASDAQ.