Product Security Engineer

Plaid · Fintech · Seattle Metro · All Cost Centers

Product Security Engineer at Plaid, a fintech company, focused on building production-grade services, libraries, and frameworks to enhance security posture and automate security controls within the CI/CD pipeline. The role involves developing internal tooling for vulnerability detection, dependency management, and remediation, aiming to replace manual security gates with engineered solutions and ensure services meet security standards.

What you'd actually do

  1. Build the secure engineering foundations that secure the future of digital finance.
  2. Develop maintainable and secure software to enhance Plaid's security posture and create paved roads for developers for easy and default integration of security controls.
  3. Design, develop, and maintain security-critical services and components.
  4. Develop internal tooling to automate vulnerability detection, dependency management, and remediation workflows within the CI/CD pipeline.
  5. Replace manual security gates with engineered solutions that allow product teams to ship faster and more securely.

Skills

Required

  • 2 + years of professional experience building and scaling production services.
  • Ability to architect software systems to meet security, privacy, usability, scalability and cost requirements.

Nice to have

  • Experience building systems or services related to vulnerability management, data encryption, key management, secret management, user authentication, service authentication, authorization systems, and security policy enforcement.
  • Experience designing distributed systems and microservices with a focus on performance and reliability.
  • Familiarity with modern cloud infrastructure (AWS, Kubernetes, Terraform) and how to integrate security controls into them.
  • A passion for creating tools and libraries that other engineers love to use.
  • Passionate about educating others on security and privacy.

What the JD emphasized

  • production services
  • security
  • vulnerability management
  • security controls
  • security posture
  • security standards
  • security vulnerabilities
  • security platform