Essential Responsibilities:
Minimum Qualifications:
Your way to
You are curious about trends in the vulnerability data and propose steps to in the largest risk reduction. You takeresources and develop cross functional action plans
Your day to day:
Responsibilities will be tailored based on business need, experience, and interest. In your day-to-day role, you will:
You help drive the operational workflow around application security vulnerabilities
determinethe impact of vulnerabilities in our environment and communicate them to stakeholders across the company
You will report to the Senior Manager, Threat Exposure Management and provide updates on critical vulnerabilities and overall posture
You love to play detective and find patterns in thedata pointing to root causes that unlock mitigation opportunities
identify,driveand implement process improvements to reduce the time to detect and mitigate vulnerabilities and increase overall efficiency
You will work with our internal and external service providers/vendors to resolve blockers andmaintainhigh quality service
will bework with TEM/Product Security leadership tomaintaintheforward lookingroadmap for the team, including defining and monitoring performance against Objectives and Key Results (OKRs), planning for new capabilities, evaluating vendors, and individual career development plans
You have and encourage a passion for cybersecurity and learning through asking questions and experimenting with different approaches
Provide consulting and advisement to software engineers on best practices, secure coding techniques, and vulnerability remediation
Document and automate vulnerability management runbooks
Stay up to date with the latest security trends, technologies, vulnerabilities, and attacks, and incorporate this knowledge intoyourday to day
What you need to bring:
At least 5 years of experience in an application security or software development discipline; 2+ years doing this at large enterprise scale
Strong programming experience in at least one language such as Ruby, Java, Python, JavaScript, Swift.
Experience with interpreting the results of vulnerability scanning tools: SAST, API security scanners, software composition analysis
Experience working with developers to communicate deficiencies and implement security measures.
Experience inidentifyingand remediating common application security vulnerabilities such as OWASP Top 10 and a deep understanding of web application and mobile app vulnerabilities.
Excellent written and verbal communication skills.
Ability to work independently and as part of a team.
Experience with implementing and configuring vulnerability managementplatforms/applicationsecurity posture management platforms (for example,Seemplicity, Kenna,Brinqa, Vulcan,ArmorCode)
Excellent written and verbal communication skills.
Familiarity with relevant financial services regulations and security standards, such as PCI-DSS and ISO27001
operatein fast-paced environment, in a self-driven manner, taking initiative and ownership to propose improvements and solutions
Demonstrate attention to detail, excellent analytical thinking,communicationand time management skills
in working with large data sets todeterminepatterns and drive to key takeaways
Ability to mentor and guide junior team members.
Experience with at least one of the main cloud vendors is a plus (Amazon Web Services, Azure, Google Cloud Platform)
Industry certifications (e.g., CISSP, CISM, CCSP,CSSLPor equivalent)are a plus
Travel Percent:
The total compensation for this practice may include an annual performance bonus (or other incentive compensation, as applicable), equity, and medical, dental, vision, and other benefits. For more information, visit .
The US national annual pay range for this role is $123,500 to $212,850
Our Benefits:
PayPal provides equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, pregnancy, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state, or local law. In addition, PayPal will provide reasonable accommodations for qualified individuals with disabilities. If you are unable to submit an application because of incompatible assistive technology or a disability, please contact us
Any general requests for consideration of your skills, please
משרות נוספות שיכולות לעניין אותך