2 days ago
Base Salary
$190k - $263k/yr
Responsibilities
- Lead security architecture and design reviews for high-priority products from early development through launch.
- Conduct threat modeling and technical security assessments of complex applications, APIs, distributed systems, and product workflows.
- Evaluate authentication, authorization, trust boundaries, sensitive data flows, business logic, and potential abuse cases.
- Review application code, investigate security weaknesses, and validate that proposed fixes address underlying risks.
- Assess security implications of new technologies, including AI-powered applications and agentic workflows.
- Partner with engineering leadership to prioritize risks, agree on mitigations, and track remediation or approved risk acceptance.
- Define reusable security requirements and secure design patterns and help engineering teams implement preventive controls.
- Use AI-assisted security analysis and testing to improve assessments and validate security assumptions.
Requirements
- 5+ years of experience in product or application security.
- Strong expertise in secure architecture, application security fundamentals, and technical risk assessment.
- Experience leading security design reviews and threat modeling for complex applications, APIs, or distributed systems.
- Deep understanding of authentication, authorization, trust boundaries, sensitive data protection, and common application security vulnerabilities.
- Strong software engineering fundamentals, including the ability to read application code, analyze vulnerability paths, and evaluate security fixes.
- Experience assessing security risks in cloud-native applications and understanding architecture and implementation security implications.
- Ability to communicate complex security risks, recommend practical mitigations, and influence engineering and product leadership.
- Ability to work independently in ambiguous environments and collaborate effectively across teams.
- Preferred experience securing AI-powered applications or agentic systems, conducting penetration testing, performing vulnerability research, or securing fintech products and systems handling sensitive or regulated data.
Benefits
- Comprehensive medical, dental, vision, and 401(k) benefits.
- Equity and/or commission may be provided depending on the position offered.
- Plaid is an equal opportunity employer and provides reasonable accommodations during the recruiting process.
Categories
About Plaid
Plaid builds APIs and SDKs that let developers and financial institutions connect consumer bank and investment accounts, verify ownership, retrieve transactions, assess income/liabilities, fight fraud, and move money (e.g., ACH/transfer). It sells usage-based access to products like Link, Auth, Transactions, Identity, Income, Liabilities, and Payments. Founded in 2013 and headquartered in San Francisco, Plaid’s network spans 12,000+ financial institutions across the US, Canada, the UK, and Europe, with customers including Venmo, SoFi, and Betterment.