Senior Security Engineer - Offensive Security

Plaid • New York, NY

2d

About The Position

We believe that the way people interact with their finances will drastically improve in the next few years. We’re dedicated to empowering this transformation by building the tools and experiences that thousands of developers use to create their own products. Plaid powers the tools millions of people rely on to live a healthier financial life. We work with thousands of companies like Venmo, SoFi, several of the Fortune 500, and many of the largest banks to make it easy for people to connect their financial accounts to the apps and services they want to use. Plaid’s network covers 12,000 financial institutions across the US, Canada, UK and Europe. Founded in 2013, the company is headquartered in San Francisco with offices in New York, Washington D.C., London and Amsterdam. The Platform Security (PlatSec) team protects Plaid’s corporate and production environments, spanning endpoint and infrastructure security as well as detection and response. We work to minimize the risk of compromise by hardening laptops and production services, identifying attacks early, and responding decisively when issues arise. As the founding member of Plaid’s red team, you will establish and define our offensive security program. You’ll determine which types of operations we should run in both the short and long term, and then carry them out, shifting between strategic planning and hands-on technical work throughout the year. You’ll partner with stakeholders to understand the issues you uncover, both high level and granular, and to incorporate the red team’s work into day-to-day operations and long-term planning. You’ll communicate findings to stakeholders at all levels, including the C-team. Over the next few years, you’ll help grow the team by interviewing candidates for new roles and potentially stepping into a management or TL position.

Requirements

• 5+ years of experience in offensive security roles
• Experience leading individual offensive security/red team operations
• Comfortable operating independently and defining your own direction
• Comfortable communicating with a wide range of technical and non-technical stakeholders

Nice To Haves

• Experience leading an offensive security/red team program
• Experience developing a new offensive security/red team program
• OSCP and/or OSCE certification

Responsibilities

• Establish a charter and framework for Plaid’s offensive security program.
• Conduct red team operations against corp and prod infrastructure to identify previously unknown problems and assess the state of Plaid’s security. These may include goal-oriented and adversary emulation exercises.
• Communicate findings to stakeholders and follow up to ensure appropriate resolution, with the aid of existing planning and risk mitigation processes.
• Serve as the primary owner for red teaming at Plaid.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed
• Number of Employees: 501-1,000 employees