10 hours ago
Bengaluru, IndiaMid Level
Responsibilities
- Scope and execute penetration tests across web, mobile, APIs, thick-client applications, cloud environments, and internal infrastructure.
- Conduct secure source-code reviews and identify complex vulnerabilities, business logic weaknesses, and false positives.
- Validate findings from AI-assisted code reviews and automated security tools, assessing exploitability, business impact, severity, and remediation priority.
- Test authentication, authorization, session management, OAuth, OIDC, JWT, CSP, cryptography, and related application security controls.
- Document vulnerabilities with reproduction steps, realistic attack scenarios, technical context, and actionable remediation guidance.
- Support engineering teams through remediation and closure of security findings.
- Assess systems against applicable security requirements, including PCI DSS, and contribute to security research and Offensive Security initiatives.
Requirements
- At least 3 years of relevant experience and a bachelor’s degree, or an equivalent combination of education and experience.
- Five or more years of hands-on penetration-testing experience is preferred, including managing assessments from scoping through remediation support.
- Experience with secure source-code reviews, complex vulnerabilities, business logic flaws, application security, cloud environments, identity flows, and attacker techniques.
- Knowledge of the MITRE ATT&CK framework and familiarity with PTES and OWASP penetration-testing guidance.
- Proficiency in a scripting language such as Python, PowerShell, or Perl.
- Software development experience with Java or Node.js is preferred.
- Experience assessing AI/ML systems or using AI-assisted security analysis and automation is a plus.
- OSWE, OSCP, GPEN, GWAPT, or CEH certifications are a plus.
- Strong technical writing, communication, critical-thinking, and attention-to-detail skills.
Benefits
- Balanced hybrid work model with three days in the office and two days at either the PayPal office or home workspace.
- Generous paid time off, healthcare coverage for employees and families, financial-security resources, and mental-health support.
- No travel is required; the posting lists Travel Percent as 0.
About PayPal
PayPal builds digital payments platforms for consumers and merchants, including PayPal, Venmo, and Xoom, supporting online, in‑app, and in‑person checkout and peer‑to‑peer transfers. It earns primarily from transaction and merchant processing fees, plus value‑added services such as risk management and branded credit. Founded in 1998 and headquartered in San Jose, California, PayPal operates in roughly 200 markets and is a public company traded on NASDAQ.