Senior Offensive Security Engineer

The Company

PayPal has been revolutionizing commerce globally for more than 25 years. Creating innovative experiences that make moving money, selling, and shopping simple, personalized, and secure, PayPal empowers consumers and businesses in approximately 200 markets to join and thrive in the global economy. 

We operate a global, two-sided network at scale that connects hundreds of millions of merchants and consumers. We help merchants and consumers connect, transact, and complete payments, whether they are online or in person. PayPal is more than a connection to third-party payment networks. We provide proprietary payment solutions accepted by merchants that enable the completion of payments on our platform on behalf of our customers.

We offer our customers the flexibility to use their accounts to purchase and receive payments for goods and services, as well as the ability to transfer and withdraw funds. We enable consumers to exchange funds more safely with merchants using a variety of funding sources, which may include a bank account, a PayPal or Venmo account balance, PayPal and Venmo branded credit products, a credit card, a debit card, certain cryptocurrencies, or other stored value products such as gift cards, and eligible credit card rewards.  Our PayPal, Venmo, and Xoom products also make it safer and simpler for friends and family to transfer funds to each other. We offer merchants an end-to-end payments solution that provides authorization and settlement capabilities, as well as instant access to funds and payouts. We also help merchants connect with their customers, process exchanges and returns, and manage risk. We enable consumers to engage in cross-border shopping and merchants to extend their global reach while reducing the complexity and friction involved in enabling cross-border trade. 

Our beliefs are the foundation for how we conduct business every day.  We live each day guided by our core values of Inclusion, Innovation, Collaboration, and Wellness. Together, our values ensure that we work together as one global team with our customers at the center of everything we do – and they push us to ensure we take care of ourselves, each other, and our communities.

Job Description Summary:

What you need to know about the role:

You will lead advanced Offensive Security initiatives, designing red team operations, developing purple team strategies, and spearheading research to preempt and neutralize sophisticated cyber threats. The role demands a powerful blend of technical prowess, leadership acumen, and an unwavering commitment to staying ahead of evolving security trends

Meet our team:

By proactively identifying vulnerabilities and emulating real-world threats, the Offensive Security team reduces the organization’s risk exposure, protects revenue, and preserves customer trust. Their collaboration with defense teams drives continuous security improvements, enabling the business to rapidly adapt and comply with evolving cybersecurity demands

Job Description:

Your way to impact:

By leading advanced red team engagements and establishing collaborative purple team frameworks, this role directly strengthens the organization’s security posture against emerging threats. Through continuous research and tool development, it enables the business to stay ahead of sophisticated cyber adversaries and minimize potential financial, legal, and reputational risks. Detailed reporting and strategic roadmaps ensure that security investments align with broader business objectives, ultimately safeguarding brand reputation and fostering stakeholder trust

Your day to day:

You will plan and execute red team engagements to expose vulnerabilities and evaluate the organization's defensive capabilities. You will collaborate with detection and response teams to develop purple team strategies, continuously refining offensive and defensive tactics. You will conduct in-depth security research on emerging threats, prototype new tools, and analyze zero-day exploits to stay ahead of advanced adversaries. Finally, you will  prepare thorough reports for both technical and non-technical stakeholders, providing risk assessments and recommending improvements that shape the organization’s long-term security roadmap

What do you need to bring:

• Experience conducting stealth red team engagements, including lateral movement, persistence, and data exfiltration.

• Proficiency in attack automation and tool development.

• Familiarity with blue team operations and defensive security technologies (SIEMs, EDR, IDS/IPS).

• Demonstrated experience in security research and development, with published tools, papers, or exploit research a plus

**We know the confidence