Senior Offensive Security Engineer

The Company PayPal has been revolutionizing commerce globally for more than 25 years. Creating innovative experiences that make moving money, selling, and shopping simple, personalized, and secure, PayPal empowers consumers and businesses in approximately 200 markets to join and thrive in the global economy. We operate a global, two-sided network at scale that connects hundreds of millions of merchants and consumers. We help merchants and consumers connect, transact, and complete payments, whether they are online or in person. PayPal is more than a connection to third-party payment networks. We provide proprietary payment solutions accepted by merchants that enable the completion of payments on our platform on behalf of our customers. We offer our customers the flexibility to use their accounts to purchase and receive payments for goods and services, as well as the ability to transfer and withdraw funds. We enable consumers to exchange funds more safely with merchants using a variety of funding sources, which may include a bank account, a PayPal or Venmo account balance, PayPal and Venmo branded credit products, a credit card, a debit card, certain cryptocurrencies, or other stored value products such as gift cards, and eligible credit card rewards. Our PayPal, Venmo, and Xoom products also make it safer and simpler for friends and family to transfer funds to each other. We offer merchants an end-to-end payments solution that provides authorization and settlement capabilities, as well as instant access to funds and payouts. We also help merchants connect with their customers, process exchanges and returns, and manage risk. We enable consumers to engage in cross-border shopping and merchants to extend their global reach while reducing the complexity and friction involved in enabling cross-border trade. Our beliefs are the foundation for how we conduct business every day. We live each day guided by our core values of Inclusion, Innovation, Collaboration, and Wellness. Together, our values ensure that we work together as one global team with our customers at the center of everything we do – and they push us to ensure we take care of ourselves, each other, and our communities. Job Description Summary: What you need to know about the role: You will lead advanced Offensive Security initiatives, designing red team operations, developing purple team strategies, and spearheading research to preempt and neutralize sophisticated cyber threats. The role demands a powerful blend of technical prowess, leadership acumen, and an unwavering commitment to staying ahead of evolving security trends Meet our team: By proactively identifying vulnerabilities and emulating real-world threats, the Offensive Security team reduces the organization’s risk exposure, protects revenue, and preserves customer trust. Their collaboration with defense teams drives continuous security improvements, enabling the business to rapidly adapt and comply with evolving cybersecurity demands Job Description: Your way to impact: By leading advanced red team engagements and establishing collaborative purple team frameworks, this role directly strengthens the organization’s security posture against emerging threats. Through continuous research and tool development, it enables the business to stay ahead of sophisticated cyber adversaries and minimize potential financial, legal, and reputational risks. Detailed reporting and strategic roadmaps ensure that security investments align with broader business objectives, ultimately safeguarding brand reputation and fostering stakeholder trust Your day to day: You will plan and execute red team engagements to expose vulnerabilities and evaluate the organization's defensive capabilities. You will collaborate with detection and response teams to develop purple team strategies, continuously refining offensive and defensive tactics. You will conduct in-depth security research on emerging threats, prototype new tools, and analyze zero-day exploits to stay ahead of advanced adversaries. Finally, you will prepare thorough reports for both technical and non-technical stakeholders, providing risk assessments and recommending improvements that shape the organization’s long-term security roadmap What do you need to bring: Experience conducting stealth red team engagements, including lateral movement, persistence, and data exfiltration. Proficiency in attack automation and tool development. Familiarity with blue team operations and defensive security technologies (SIEMs, EDR, IDS/IPS). Demonstrated experience in security research and development, with published tools, papers, or exploit research a plus **We know the confidence gap and imposter syndrome can get in the way of meeting spectacular candidates. Please don't hesitate to apply. Additional Job Description: Subsidiary: PayPal Travel Percent: 0 For the majority of employees, PayPal's balanced hybrid work model offers 3 days in the office for effective in-person collaboration and 2 days at your choice of either the PayPal office or your home workspace, ensuring that you equally have the benefits and conveniences of both locations. Our Benefits: At PayPal, we’re committed to building an equitable and inclusive global economy. And we can’t do this without our most important asset—you. That’s why we offer benefits to help you thrive in every stage of life. We champion your financial, physical, and mental health by offering valuable benefits and resources to help you care for the whole you. We have great benefits including a flexible work environment, employee shares options, health and life insurance and more. To learn more about our benefits please visit https://www.paypalbenefits.com. Who We Are: Click Here to learn more about our culture and community. Commitment to Diversity and Inclusion PayPal provides equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, pregnancy, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state, or local law. In addition, PayPal will provide reasonable accommodations for qualified individuals with disabilities. If you are unable to submit an application because of incompatible assistive technology or a disability, please contact us at talentaccommodations@paypal.com. Belonging at PayPal: Our employees are central to advancing our mission, and we strive to create an environment where everyone can do their best work with a sense of purpose and belonging. Belonging at PayPal means creating a workplace with a sense of acceptance and security where all employees feel included and valued. We are proud to have a diverse workforce reflective of the merchants, consumers, and communities that we serve, and we continue to take tangible actions to cultivate inclusivity and belonging at PayPal. Any general requests for consideration of your skills, please Join our Talent Community. We know the confidence gap and imposter syndrome can get in the way of meeting spectacular candidates. Please don’t hesitate to apply. At PayPal we are reimagining money, democratizing financial services, and giving people more ways to safely connect to their money and to each other. We are purpose-driven and looking for people who want to join us at the forefront of the digital payments revolution. Learn more at PayPal.com/Jobs Learn more about privacy-related questions or data retention. If you would like your profile to be deleted from our system, please let us know Please note that this site has updated features that can’t run on older versions of Internet Explorer. Please use IE11 or MS Edge for an optimal experience. When applying for a job you are required to create an account, if you have already created an account - click Sign In. Creating an account will allow you to follow the progress of your applications. Our system does have some requirements that will help us process your application, below are some guidelines for creation of your account: Provide full legal First Name/Family Name – this is important for us to ensure our future hires have the right system set up. Please Capitalize first letter of your First and Last Name. Please avoid using fully capitalized text for your First and/or Last Name. NOTE: If your name is hyphenated or has multiple capitalization, please use the same format as your government ID. Please note that this site has updated features that can’t run on older versions of Internet Explorer. Please use IE11 or MS Edge for an optimal experience.