Senior Product Security Engineer

Plaid • Seattle, WA

7d

About The Position

Plaid’s Product Security Team works to improve customer trust by assuring the secure development and delivery of products and services, minimizing ecosystem risk, and preventing security incidents. The team partners with engineering and product teams on security architecture and design, application security, vulnerability management, supply chain security, and security automation. It builds automated security capabilities to expand testing coverage, validate fixes, and reduce recurring vulnerabilities, including as AI accelerates software development.

The Senior Product Security Engineer leads security architecture and design reviews for high-priority products, from early development through launch. The role assesses complex applications, APIs, distributed systems, product workflows, and new technologies—including AI-powered applications and agentic workflows—to identify material security risks and practical mitigations. The engineer works directly with product and engineering teams, reviews code, helps prioritize and track remediation or approved risk acceptance, and develops reusable security requirements and secure design patterns. The role also leverages AI-assisted security analysis and testing to improve assessments and validate security assumptions.

Requirements

• At least 5 years of experience in product or application security.
• Strong expertise in secure architecture, application security fundamentals, and technical risk assessment.
• Experience leading security design reviews and threat modeling for complex applications, APIs, or distributed systems.
• Deep understanding of authentication, authorization, trust boundaries, sensitive data protection, and common application security vulnerabilities.
• Strong software engineering fundamentals, including the ability to read application code, analyze vulnerability paths, and evaluate security fixes.
• Experience assessing security risks in cloud-native applications and understanding the security implications of system architecture and implementation decisions.
• Ability to communicate complex security risks, recommend practical mitigations, and influence engineering and product leadership.
• Ability to operate independently in ambiguous environments and collaborate effectively across teams.

Nice To Haves

• Experience securing AI-powered applications or agentic systems.
• Experience with penetration testing, vulnerability research, or security testing of complex business logic.
• Experience securing financial technology products or systems handling sensitive or regulated data.

Responsibilities

• Lead security architecture and design reviews for high-priority products, working with engineering and product teams from early development through launch.
• Conduct threat modeling and technical security assessments of complex applications, APIs, distributed systems, and product workflows.
• Evaluate authentication, authorization, trust boundaries, sensitive data flows, and business logic to identify vulnerabilities and abuse cases.
• Review application code, investigate security weaknesses, and validate that proposed fixes address underlying risks.
• Assess the security implications of new technologies and product capabilities, including AI-powered applications and agentic workflows.
• Partner with engineering leadership to prioritize material security risks, agree on mitigations, and track risks through remediation or approved risk acceptance.
• Identify recurring security weaknesses, define reusable security requirements and secure design patterns, and partner with engineering teams to implement preventive controls.
• Use AI-assisted security analysis and testing to improve security assessments and validate important security assumptions.

Benefits

• Comprehensive benefit plan, including medical, dental, and vision coverage.
• 401(k).
• Additional compensation may include equity and/or commission, depending on the position offered.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed