Staff Security Engineer, API Security

PayPal
Bengaluru
Workplace: OnsiteFull timeFunction: CybersecurityEducation: bachelorsSkills: ["Analytical skills","Sound judgment","Stakeholder collaboration","Technical leadership","Mentoring"]

Own and evolve PayPal’s end-state API security capability by consolidating linting, gateway visibility, shadow-API detection, and schema security checks into the org’s policy-as-code enforcement architecture. Ship an end-to-end API security pre-release gate, define a production-ready DAST strategy, and extend API security into pipeline access/execution control and supply-chain style artifact verification. Provide staff-level technical leadership across design reviews, delivery, and sustaining engineering.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
PayPal
PayPal
3 days ago

Staff Security Engineer, API Security

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 2 hours agoStatus: Live

Job Summary

Own and evolve PayPal’s end-state API security capability by consolidating linting, gateway visibility, shadow-API detection, and schema security checks into the org’s policy-as-code enforcement architecture. Ship an end-to-end API security pre-release gate, define a production-ready DAST strategy, and extend API security into pipeline access/execution control and supply-chain style artifact verification. Provide staff-level technical leadership across design reviews, delivery, and sustaining engineering.
Location: Bengaluru
Workplace: Onsite
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Build the end-state API security capability plane by consolidating API security linting, gateway traffic visibility, shadow-API detection, and schema security checks into a single policy-as-code enforcement capability.
  • •Take an API security pre-release gate from draft architecture decision to a shipped end-to-end control by enforcing gateway-level hard-block policy.
  • •Own the end-to-end DAST tooling strategy, completing tool evaluation for a production migration decision and executing it.
  • •Extend API security into pipeline access & execution control and systemic artifact consumption verification using the shared enforcement architecture.
  • •Serve as a force multiplier by mentoring engineers, unblocking initiatives, and supporting staff-level routines like design review, on-call/escalation, sustaining engineering, and maintenance while shaping the team roadmap.

Pay and Benefits

Perks:Health InsurancePaid LeaveLearning Budget

Key Requirements

  • •5+ years relevant experience and a Bachelor’s degree or equivalent combination of education and experience.
  • •5+ years building production software with staff-level end-to-end ownership, with hands-on coding experience in Python or Go.
  • •Deep, hands-on API security engineering expertise across REST, GraphQL, and AsyncAPI plus authN/authZ (OAuth2 scopes and token/session models).
  • •Working fluency in policy-as-code approaches for security enforcement and CI/CD security gating, including writing enforcement policy.
  • •Practical understanding of DAST/SAST tooling internals and the ability to evaluate and replace underperforming tools.
Education:Bachelor's
Skills:Analytical skillsSound judgmentStakeholder collaborationTechnical leadershipMentoring
Tech Stack:PythonGoRESTGraphQLAsyncAPIOAuth2Policy-as-codeCI/CDDASTSASTAPI gatewayEnvoyService meshWAFMutual TLSShadow-API detectionOWASP API Security Top 10Rate limiting

Company Brief

PayPal
Global online payments platform enabling digital and mobile payments, money transfers, and merchant services for consumers and businesses, supporting e‑commerce transactions across multiple currencies and payment methods.
Industry: Payments
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: San Jose, United States
Founded: 1998
WebsiteLinkedIn