Senior Cyber Threat Analyst

The Company

PayPal has been revolutionizing commerce globally for more than 25 years. Creating innovative experiences that make moving money, selling, and shopping simple, personalized, and secure, PayPal empowers consumers and businesses in approximately 200 markets to join and thrive in the global economy. 

We operate a global, two-sided network at scale that connects hundreds of millions of merchants and consumers. We help merchants and consumers connect, transact, and complete payments, whether they are online or in person. PayPal is more than a connection to third-party payment networks. We provide proprietary payment solutions accepted by merchants that enable the completion of payments on our platform on behalf of our customers.

We offer our customers the flexibility to use their accounts to purchase and receive payments for goods and services, as well as the ability to transfer and withdraw funds. We enable consumers to exchange funds more safely with merchants using a variety of funding sources, which may include a bank account, a PayPal or Venmo account balance, PayPal and Venmo branded credit products, a credit card, a debit card, certain cryptocurrencies, or other stored value products such as gift cards, and eligible credit card rewards.  Our PayPal, Venmo, and Xoom products also make it safer and simpler for friends and family to transfer funds to each other. We offer merchants an end-to-end payments solution that provides authorization and settlement capabilities, as well as instant access to funds and payouts. We also help merchants connect with their customers, process exchanges and returns, and manage risk. We enable consumers to engage in cross-border shopping and merchants to extend their global reach while reducing the complexity and friction involved in enabling cross-border trade. 

Our beliefs are the foundation for how we conduct business every day.  We live each day guided by our core values of Inclusion, Innovation, Collaboration, and Wellness. Together, our values ensure that we work together as one global team with our customers at the center of everything we do – and they push us to ensure we take care of ourselves, each other, and our communities.

Job Description Summary:

We are seeking a proactive and detail-oriented Senior Cyber Threat Analyst to support our Applied Threat Research and Threat Planning initiatives. This high-profile role will involve conducting in-depth incident reviews, facilitating root cause analyses, identifying and managing attack patterns, and leading tabletop exercises. The ideal candidate will have a strong background in cybersecurity, excellent communication skills, and the ability to collaborate effectively with various stakeholders across the organization.

Job Description:

This role bridges our deeply technical cyber operations team with our executive leadership and internal business partners, enabling the organization the identify, qualify, and plan for cyber threats. If you like tackling large, complex problems and making a pronounced difference in our security posture, this is the role for you.

An ideal candidate will be able to:

• Collaborate with the Incident Response and Crisis Management teams to identify long-term actions post-incident, identifying systemic issues resulting from incidents or testing and develop actionable recommendations in partnership with control owners.

• Work closely with Security Architecture, Product Security, Governance, Risk, & Compliance, and control owners to implement changes that enhance control coverage and maturity.

• Assist leadership in understanding the organization’s security posture in relation to specific threat scenarios through a consultative approach.

• Analyze threat actors, risk footprint, and the effectiveness of current controls to provide strategic insights.

• Lead the development and presentation of reporting for the VP+ community

• Leverage learnings to design and facilitate operational tabletop exercises for SOC, CSIRT, and PSIRT functions.

Skills we think will make you successful in this role include:

• 7+ years of experience across any technical cybersecurity roles, including but not limited to cyber threat intelligence, threat-modeling, incident response, or red-teaming.

• Proven ability to communicate complex technical concepts to non-technical audiences.

• Strong intellectual curiosity and a drive for thorough analysis. Demonstrates a commitment to exploring challenges beyond initial solutions, recognizing that preliminary answers may often be incomplete or incorrect.

• Experience in facilitating training sessions or tabletop exercises is preferred.

• Strong interpersonal skills and ability to work col