Senior Cybersecurity Engineer

About the role

The Offensive Security team at PayPal protects the company’s products, applications, networks, cloud environments and infrastructure by performing authorized testing and providing remediation guidance. This senior role combines hands‑on penetration testing with vulnerability validation across application, network and cloud environments.

Key responsibilities

• Scope and perform penetration tests from planning through reporting and remediation support.
• Perform hands‑on testing of web applications, mobile applications, APIs and internal infrastructure, including network and cloud environments.
• Review and validate potential vulnerabilities identified by AI‑assisted code reviews and other automated security tools.
• Reproduce findings, assess exploitability, business impact and remediation priority.
• Communicate findings with clear context, reproduction steps, realistic attack scenarios and practical remediation guidance.
• Support engineering and infrastructure teams through remediation and closure of security findings.

Required profile

• 3+ years of relevant experience and a Bachelor’s degree or equivalent combination of education and experience.
• At least five years of hands‑on penetration testing experience, managing assessments from scoping through reporting and remediation support.
• Strong writing, communication, attention to detail and critical thinking skills.

Required skills

• Penetration testing across web, mobile, API, network and cloud environments.
• Knowledge of application and network security, cloud environments, identity flows and the MITRE ATT&CK framework.
• Proficiency in at least one scripting language such as Python, PowerShell or Perl.
• Familiarity with testing methodologies such as PTES and OWASP.