Information Security Engineer

The Company

PayPal has been revolutionizing commerce globally for more than 25 years. Creating innovative experiences that make moving money, selling, and shopping simple, personalized, and secure, PayPal empowers consumers and businesses in approximately 200 markets to join and thrive in the global economy. 

We operate a global, two-sided network at scale that connects hundreds of millions of merchants and consumers. We help merchants and consumers connect, transact, and complete payments, whether they are online or in person. PayPal is more than a connection to third-party payment networks. We provide proprietary payment solutions accepted by merchants that enable the completion of payments on our platform on behalf of our customers.

We offer our customers the flexibility to use their accounts to purchase and receive payments for goods and services, as well as the ability to transfer and withdraw funds. We enable consumers to exchange funds more safely with merchants using a variety of funding sources, which may include a bank account, a PayPal or Venmo account balance, PayPal and Venmo branded credit products, a credit card, a debit card, certain cryptocurrencies, or other stored value products such as gift cards, and eligible credit card rewards.  Our PayPal, Venmo, and Xoom products also make it safer and simpler for friends and family to transfer funds to each other. We offer merchants an end-to-end payments solution that provides authorization and settlement capabilities, as well as instant access to funds and payouts. We also help merchants connect with their customers, process exchanges and returns, and manage risk. We enable consumers to engage in cross-border shopping and merchants to extend their global reach while reducing the complexity and friction involved in enabling cross-border trade. 

Our beliefs are the foundation for how we conduct business every day.  We live each day guided by our core values of Inclusion, Innovation, Collaboration, and Wellness. Together, our values ensure that we work together as one global team with our customers at the center of everything we do – and they push us to ensure we take care of ourselves, each other, and our communities.

Job Description Summary:

What you need to know about the role:

As a highly skilled technical professional you will be responsible for integrating robust security practices into the DevOps pipeline, designing and implementing secure infrastructure as code, actively monitoring for threats, and
leading security initiatives within the development and operations teams, ensuring the continuous delivery of secure applications across the organization.

Meet our team:

We provide enterprise security to protect our organizations network and core business features and provide visibility into the health and compliance of our environment.

Job Description:

Your way to impact:

Promoting a DevSecOps culture through collaboration and sharing

security knowledge fosters a collaborative environment where

security is integrated into every stage of the development

lifecycle. This holistic approach ensures that security is a priority,

leading to more secure and resilient systems, directly benefiting

our company’s overall security posture.

Automating security checks and remediation processes within the

CI/CD pipeline streamlines our security operations and ensures

continuous monitoring and compliance. This efficiency allows us

to identify and address security issues early in the development

process, minimizing potential disruptions and enhancing productivity.

Your day to day:
In your day to day role you will XXX

• Integrating security scans and vulnerability checks into the CI/CD pipeline.

• Reviewing and enforcing security policies within automation scripts.

• Investigating security incidents and coordinating response actions

• Reviewing/help with enforcing security configurations on servers, networks, and cloud environments

• Implementing security best practices for containerized applications

• Designing and implementing security architectures for new applications and systems

• Evaluating new security technologies and tools, staying up-to-date with emerging security trends and standards

• Always promoting a security-first culture within the