Senior Cybersecurity Engineer - Offensive Security

About the role

The Offensive Security team at PayPal protects its products, applications, networks, cloud environments and infrastructure by testing them and working with engineering and infrastructure teams to identify risks and support remediation. This role combines hands-on penetration testing with vulnerability validation across application, network and cloud environments, reviewing findings from AI-assisted code reviews and automated tools, reproducing vulnerabilities and assessing their exploitability and business impact.

Key responsibilities

• Independently apply security best practices to optimise systems and align security solutions with business objectives
• Partner with peers and teams to drive security initiatives and co-lead security efforts
• Analyse and resolve security challenges, influencing team quality and efficiency
• Perform penetration tests from planning through reporting and remediation support
• Test web, mobile, API and internal infrastructure applications, and perform network, segmentation and cloud penetration testing
• Review and validate vulnerabilities found by automated tools, assess severity, priority and false positives, and guide remediation
• Evaluate AI and ML systems and use automation to improve testing
• Assess systems against requirements such as PCI DSS
• Contribute to security research and other Offensive Security initiatives

Required profile

• Bachelor's degree or higher in Information Security, Computer Science or a related technical discipline
• At least five years of hands-on penetration testing experience, managing assessments from scoping to reporting and remediation
• Strong experience in one or more domains (network, cloud, web application, mobile, thick client) and ability to work across several
• Knowledge of application and network security, cloud environments, identity flows and the MITRE ATT&CK framework
• Experience with PTES and OWASP
• Security certifications such as OSCP, OSCE, OSEE or GPEN are a plus

Required skills

• Proficiency in at least one scripting language such as Python, PowerShell or Perl
• Strong writing, communication, attention to detail and critical thinking

PayPal offers a balanced hybrid model with three days in the office and two days at the office or home. It does not charge candidates any fees for courses, applications, interviews or background checks.