Senior Software Engineer - Product Security
WFA Digital Insight
As the demand for digital finance solutions grows, so does the need for skilled software engineers who can secure these systems. With a 25% increase in cybersecurity breaches in the past year, companies like Plaid are looking for experts who can build robust security protocols. Plaid's commitment to innovation and security makes this role an exciting opportunity for those passionate about shaping the future of finance. Before applying, candidates should be aware of the rapidly evolving landscape of digital finance and the importance of staying up-to-date with the latest security trends.
Job Description
About the Role
The Senior Software Engineer - Product Security role at Plaid is a unique opportunity to join a team of innovators who are dedicated to building the tools and experiences that thousands of developers use to create their own products. As a Senior Software Engineer, you will lead, design, and develop security capabilities to manage vulnerabilities lifecycle and automate workflows to reduce toil. You will be part of a team that is focused on making the 'secure path' the only path for Plaid developers.The Product Security team is responsible for managing the security processes, policies, and controls to secure Plaid's developer and consumer-facing products. This team is focused on areas like Application Security, Vulnerability Management, Secure Development Lifecycle, Penetration Testing, and Cloud Security. As a Senior Software Engineer, you will have the opportunity to work on a wide range of projects, from building production-grade services and libraries to designing and implementing technical solutions that align with the evolving needs of the business.
Plaid is a company that values innovation, collaboration, and transparency. As a Senior Software Engineer, you will be working closely with product and engineering teams to architect and build security controls to make our products even more secure. You will also have the opportunity to consult with product engineers to ensure that Plaid services meet security standards and to educate and support other engineering teams to improve security in their own products and services.
What You Will Do
- Lead, design, and develop security capabilities to manage vulnerabilities lifecycle and automate workflows to reduce toil
- Own, maintain, and build Plaid's VM Orchestration service and build solutions to eliminate entire vulnerability classes
- Partner with product and engineering teams to architect and build security controls to make our products even more secure
- Consult with product engineers to ensure Plaid services meet security standards
- Help educate and support other engineering teams to improve security in their own products and services
- Assist with Plaid's incident response and security awareness programs
- Collaborate with other security platform members and build necessary engineering solutions to meet their needs
- Develop internal tooling to automate vulnerability detection, dependency management, and remediation workflows within the CI/CD pipeline
- Replace manual security gates with engineered solutions that allow product teams to ship faster and more securely
- Communicate effectively with managers and team members regarding project deliverables and progress
What We Are Looking For
- 5+ years of professional experience building and scaling production services
- Ability to architect and build software systems to meet security, privacy, usability, scalability, and cost requirements
- Experience building systems or services related to vulnerability management, data encryption, key management, secret management
- Strong programming skills in languages like Java, Python, or C++
- Experience with cloud-based technologies like AWS or Azure
- Knowledge of security frameworks and regulations like SOC 2 or GDPR
- Excellent communication and collaboration skills
- Ability to work in a fast-paced environment and adapt to changing priorities
- Strong problem-solving skills and attention to detail
Nice to Have
- Experience with containerization technologies like Docker
- Knowledge of security testing tools like Burp Suite or ZAP
- Familiarity with agile development methodologies like Scrum or Kanban
- Experience with continuous integration and continuous deployment (CI/CD) pipelines
Benefits and Perks
- Competitive salary and equity package
- Comprehensive health, dental, and vision insurance
- Flexible paid time off and remote work options
- Professional development opportunities and training budget
- Access to the latest tools and technologies
- Collaborative and dynamic work environment
- Recognition and reward programs for outstanding performance
- Opportunity to work on high-impact projects and contribute to the growth of the company
How to Stand Out
- Make sure to highlight your experience with security protocols and technologies in your resume and cover letter
- Be prepared to provide specific examples of your experience with vulnerability management and security testing
- Show your passion for security and your ability to stay up-to-date with the latest trends and technologies
- Don't be afraid to ask questions during the interview process to demonstrate your interest in the role and the company
- Be prepared to provide examples of your experience with cloud-based technologies and containerization
- Consider creating a portfolio of your work to showcase your skills and experience
This is a remote position listed on WFA Digital, the platform for professionals who work from anywhere. Browse more remote jobs across all categories.