Staff Security Engineer, API Security
PayPal (company site, opens in a new tab)5+ yrsBengaluruOn-siteDirect career pageEst. 35–55 LPA
Posted on 10 Sept
Reach people at PayPal
People at this company you can reach
Log in to see who works here
Create a free account or log in to see the people at PayPal you could write to:
- Recruiters & HR
- People in this function
- Work addresses
Your match
Against your primary resume
Log in to see your match score
Create a free account or log in to unlock your CV match score across:
- Role fit
- Experience
- Industry relevance
Protocol Intelligence
How competitive this role is
Competition
Background fit
Strictness
Log in to see why each signal reads the way it does.
Job description
Structured overview of role & requirements
About This Role
- Own and build the end-state API security capability, consolidating multiple API security tools and integrating with shared policy-as-code enforcement architecture.
- Lead the dynamic application security testing (DAST) tooling strategy from evaluation through production migration and extend API security into supply-chain security domains.
- Provide technical leadership by mentoring engineers, unblocking initiatives, driving delivery, and shaping the security team's roadmap and backlog prioritization.
Minimum Requirements
- 5+ years of experience building production software with end-to-end ownership, including hands-on coding in Python or Go.
- Bachelor's degree or equivalent combination of education and experience.
- Deep hands-on expertise in API architecture (REST, GraphQL, AsyncAPI), authorization/authentication (OAuth2 scopes, token/session models), and API gateway/service-mesh systems (e.g., Envoy).
- Practical experience with DAST/SAST tooling, policy-as-code security enforcement, and deep knowledge of OWASP API Security Top 10 and API traffic-protection mechanisms.
Ideal Candidate Profile
- Experienced in technical leadership roles with demonstrated ability to design and ship large-scale security platform capabilities, not just incremental features.
- Strong familiarity with AI-driven API threat models and ability to reason about AI security implications in APIs.
- Operates with a strategic mindset to identify emerging business problems and influence security initiatives across diverse teams and organizational domains.