Application Security Architect jobs at Paypal in United States, Toledo
PayPal Security Diligence & Integration Manager United States, Ohio, Toledo
Share
Essential Responsibilities:
- Leverage specialized security expertise to identify and resolve complex security issues, recommending best practices and determining new approaches that have an impact on broader security operations, while aligning security strategies with business priorities
- Partner across teams and key stakeholders to drive security initiatives, leading and solutioning complex projects and programs to strengthen overall security posture.
- Apply advanced analytical skills and sound judgment to solve security challenges, considering diverse perspectives and innovative solutions. Stay current with industry trends and emerging technologies, understanding their security implications to the company’s context.
- Directly contribute to improvements within the security domain and occasionally beyond, ensuring decisions lead to meaningful enhancements in security practices.
- Leverage relationships across teams, both within and outside of security, to influence initiatives and integrate feedback into security processes.
- Develop and articulate clear plans and priorities for the team, guiding them to achieve security objectives while fostering a collaborative and high-performance environment.
- Lead by example, providing mentorship and support to ensure the team successfully executes on initiatives and goals.
Expected Qualifications:
- Minimum of 8 years of relevant work experience and a Bachelor's degree or equivalent experience.
Preferred Qualification:
Expectations for PayPal’s continued successful growth are dependent on the ability of the individual to:
- Lead Cybersecurity diligence for Ventures and M&A projects.
- Perform comprehensive security assessments of counterparty including infrastructure, applications, products and overall organization maturity and capability.
- Identify gaps, assess risks, prioritize, develop, and manage remediation action plans through the entire M&A and Integration process that include determinations of highest risk.
- Lead the Cybersecurity integration workstream for newly acquired companies
- Employ interpersonal communication skills and hands-on engineering skills to enable newly acquired businesses to mesh into PayPal’s security program.
- Create detailed and well-considered plans and budgets which will reduce churn, unplanned work, and unnecessary spend.
- Be a trusted advisor to the PayPal Corporate Development deal team and PayPal senior leadership by recommending tailored strategies to reduce cyber risk through the deal lifecycle.
- Up to 30% travel, depending on acquisition pace and location.
Primary Job Responsibilities
- Lead and support the risk assessment process for PayPal Ventures through analysis and delivering articulate, polished due diligence reports.
- Lead and support the M&A Due Diligence and post-close cybersecurity integration process for PayPal.
- Lead with influence to drive cybersecurity integrations in coordination with program management and engineering resources.
- Mature the overall Ventures and M&A security integration processes, methodology, and approach.
- Lead security assessments and testing of networks, platforms, and applications with internal and external teams under tight timelines.
- Assess the maturity of counterparty cybersecurity programs through examination of security documentation, review of processes, and leading interviews with key staff.
- Identify gaps, assess risk, and develop remediation action plans.
- Develop 2-year control implementation roadmaps aligned to integration plans with supporting budgets for acquired companies.
Qualifications
- A cybersecurity leader with experience across a range of enterprise-wide information security functions, multi-cloud and data center technology architectures, capabilities, and processes.
- 8+ years of experience in a senior information security position with a portion of that time allocated to leadership responsibility.
- Experience with M&A related processes, deal phases, and security due diligence preferred
- Experience leading, implementing, and owning a cybersecurity program preferred.
- Strong working knowledge and understanding of technical implementations for Identity and Access Management, Cryptography and Key Management, Vulnerability Management, and other cybersecurity domains.
- Curiosity and willingness to expand knowledge across cybersecurity domains while working through complex projects.
- Experience in financial services or security technology industries, preferably in dynamic and fast changing environments.
- Deep and proven understanding of risk management.
- Track record of building program plans and budgets for which they are personally accountable.
- Exhibit an ownership mindset that emphasizes responsibility, follow-through, and long-term impact.
Key Competencies Required
- Collaborative leadership: This individual must demonstrate strong, inclusive, and team focused collaboration with the ability to drive consensus across business and technology organizations, and developing strong, durable, and effective partnerships with executives and operating teams in all geographies
- Outstanding technologist: The leader must possess a comprehensive understanding of current technology and information security.
- Strong interpersonal skills: This leader must be highly articulate both verbally and in written form, be able to interact at both strategic and tactical levels, and able to effectively interact with, and influence senior leaders
- Written Communication Skills: Ability to produce high-quality technical reports for many audiences, including executive staff.
- Self-motivated and directed with strong bias to action: The executive must have a demonstrated record of driving operations and/or projects to successful outcomes
- Innovative leadership: This individual should demonstrate the ability to lead with innovative ideas rather than follow the competition or take traditional approaches.
Other competencies
- Strong quantitative and analytical abilities with deep understanding of the impact of security initiatives on the financial performance of the business
- Lateral thinking and perseverance in achieving goals
- Comfortable dealing with ambiguity, change and conflicting priorities
- Ability to make high quality decisions with limited information
- Demonstrates the ability to quickly learn and adapt to complex systems
Travel Percent:
The total compensation for this practice may include an annual performance bonus (or other incentive compensation, as applicable), equity, and medical, dental, vision, and other benefits. For more information, visit .
The US national annual pay range for this role is $152,500 to $262,350
Our Benefits:
Any general requests for consideration of your skills, please
These jobs might be a good fit
PayPal Application Security Architect United States, Ohio, Toledo
Share
You will be responsible for developing and maintaining a robust application security strategy and architecture that aligns with industry best practices and regulatory requirements. The ideal candidate will possess a deep understanding of both AppSec and general cybersecurity principles.
Your Day to Day
Develop and maintain a robust application security strategy, standards and target state architectures which aligns with industry best practices and regulatory requirements.
Be the application security advocate across the organization. Lead discussions and reviews around new technologies, framework enhancements and product reviews.
Define and improve application security in the SDLC, ensuring security is prioritized from inception to deployment.
Conduct regular security architecture risk assessments and threat modelling to implement effective risk mitigation strategies.
Ensure compliance with relevant security standards, regulations, and industry frameworks (e.g., PCI DSS, GDPR).
Maintain awareness on latest DevSecOps approaches and how they fit into large enterprise organization’s AppSec program.
Collaborate with software engineers and leadership teams as well and cybersecurity teams to integrate security controls throughout the software development lifecycle.
Be comfortable interfacing and providing guidance to senior and technical leadership on application security issues/approaches, to achieve the deployment of effective security solutions.
What do you need to bring
Degree in Computer Science, Cybersecurity, Mathematics, or a related field.
15+ years' experience in AppSec, Software/Systems Engineering, and/or Architecture.
Expert level understanding of NodeJS, Java, modern web development frameworks and Service Oriented Architecture (SOA).
Familiarity with iOS, Android and browser SDK development.
Expert level understanding of AppSec scanning tools acrossSAST/SCA/DAST/IAST/ContainerSecurity/API Security/Secret Scanning/Fuzzing in large enterprise environments.
In depth knowledge of SDLC, and CI/CD pipelines best practices.
Good understanding of SLSA and supply chain security.
Expert level understanding of containerized platforms and security best practices.
In depth understanding of cybersecurity principles, including cryptography, authentication, web security, vulnerability assessments and threat detection.
Desired expertise in various security testing activities, including penetration testing, vulnerability scanning, and code reviews.
Working knowledge of major cloud platforms such as AWS, Azure, Google Cloud.
Industry certifications (e.g., CISSP, CISM, CCSP, or equivalent) are a plus.
Preferred Qualification:
The total compensation for this position may include an annual performance bonus (or other incentive compensation, as applicable), equity, and medical, dental, vision, and other benefits. For more information, visit
The U.S. national annual pay range for this role is $107,300to $259,600
Any general requests for consideration of your skills, please
These jobs might be a good fit
Share
Essential Responsibilities:
- Leverage specialized security expertise to identify and resolve complex security issues, recommending best practices and determining new approaches that have an impact on broader security operations, while aligning security strategies with business priorities
- Partner across teams and key stakeholders to drive security initiatives, leading and solutioning complex projects and programs to strengthen overall security posture.
- Apply advanced analytical skills and sound judgment to solve security challenges, considering diverse perspectives and innovative solutions. Stay current with industry trends and emerging technologies, understanding their security implications to the company’s context.
- Directly contribute to improvements within the security domain and occasionally beyond, ensuring decisions lead to meaningful enhancements in security practices.
- Leverage relationships across teams, both within and outside of security, to influence initiatives and integrate feedback into security processes.
- Develop and articulate clear plans and priorities for the team, guiding them to achieve security objectives while fostering a collaborative and high-performance environment.
- Lead by example, providing mentorship and support to ensure the team successfully executes on initiatives and goals.
Expected Qualifications:
- Minimum of 8 years of relevant work experience and a Bachelor's degree or equivalent experience.
Preferred Qualification:
Expectations for PayPal’s continued successful growth are dependent on the ability of the individual to:
- Lead Cybersecurity diligence for Ventures and M&A projects.
- Perform comprehensive security assessments of counterparty including infrastructure, applications, products and overall organization maturity and capability.
- Identify gaps, assess risks, prioritize, develop, and manage remediation action plans through the entire M&A and Integration process that include determinations of highest risk.
- Lead the Cybersecurity integration workstream for newly acquired companies
- Employ interpersonal communication skills and hands-on engineering skills to enable newly acquired businesses to mesh into PayPal’s security program.
- Create detailed and well-considered plans and budgets which will reduce churn, unplanned work, and unnecessary spend.
- Be a trusted advisor to the PayPal Corporate Development deal team and PayPal senior leadership by recommending tailored strategies to reduce cyber risk through the deal lifecycle.
- Up to 30% travel, depending on acquisition pace and location.
Primary Job Responsibilities
- Lead and support the risk assessment process for PayPal Ventures through analysis and delivering articulate, polished due diligence reports.
- Lead and support the M&A Due Diligence and post-close cybersecurity integration process for PayPal.
- Lead with influence to drive cybersecurity integrations in coordination with program management and engineering resources.
- Mature the overall Ventures and M&A security integration processes, methodology, and approach.
- Lead security assessments and testing of networks, platforms, and applications with internal and external teams under tight timelines.
- Assess the maturity of counterparty cybersecurity programs through examination of security documentation, review of processes, and leading interviews with key staff.
- Identify gaps, assess risk, and develop remediation action plans.
- Develop 2-year control implementation roadmaps aligned to integration plans with supporting budgets for acquired companies.
Qualifications
- A cybersecurity leader with experience across a range of enterprise-wide information security functions, multi-cloud and data center technology architectures, capabilities, and processes.
- 8+ years of experience in a senior information security position with a portion of that time allocated to leadership responsibility.
- Experience with M&A related processes, deal phases, and security due diligence preferred
- Experience leading, implementing, and owning a cybersecurity program preferred.
- Strong working knowledge and understanding of technical implementations for Identity and Access Management, Cryptography and Key Management, Vulnerability Management, and other cybersecurity domains.
- Curiosity and willingness to expand knowledge across cybersecurity domains while working through complex projects.
- Experience in financial services or security technology industries, preferably in dynamic and fast changing environments.
- Deep and proven understanding of risk management.
- Track record of building program plans and budgets for which they are personally accountable.
- Exhibit an ownership mindset that emphasizes responsibility, follow-through, and long-term impact.
Key Competencies Required
- Collaborative leadership: This individual must demonstrate strong, inclusive, and team focused collaboration with the ability to drive consensus across business and technology organizations, and developing strong, durable, and effective partnerships with executives and operating teams in all geographies
- Outstanding technologist: The leader must possess a comprehensive understanding of current technology and information security.
- Strong interpersonal skills: This leader must be highly articulate both verbally and in written form, be able to interact at both strategic and tactical levels, and able to effectively interact with, and influence senior leaders
- Written Communication Skills: Ability to produce high-quality technical reports for many audiences, including executive staff.
- Self-motivated and directed with strong bias to action: The executive must have a demonstrated record of driving operations and/or projects to successful outcomes
- Innovative leadership: This individual should demonstrate the ability to lead with innovative ideas rather than follow the competition or take traditional approaches.
Other competencies
- Strong quantitative and analytical abilities with deep understanding of the impact of security initiatives on the financial performance of the business
- Lateral thinking and perseverance in achieving goals
- Comfortable dealing with ambiguity, change and conflicting priorities
- Ability to make high quality decisions with limited information
- Demonstrates the ability to quickly learn and adapt to complex systems
Travel Percent:
The total compensation for this practice may include an annual performance bonus (or other incentive compensation, as applicable), equity, and medical, dental, vision, and other benefits. For more information, visit .
The US national annual pay range for this role is $152,500 to $262,350
Our Benefits:
Any general requests for consideration of your skills, please
These jobs might be a good fit
