Sr Analyst, Cybersecurity Threat
Core
Senior penetration tester validating vulnerabilities and assessing exploitability across web, mobile, API, and cloud environments.
Role type
Senior IC offensive security engineer (penetration testing)
Builds
Secure products and infrastructure for PayPal's global payment network
Domain
Fintech / Cybersecurity
Required skills
Penetration testing, vulnerability validation, secure code review, business logic flaw identification, cloud security, identity flow testing, scripting (Python/PowerShell/Perl), MITRE ATT&CK framework, OWASP/PTES methodologies
Preferred skills
AI/ML system testing, automation for security testing, PCI DSS compliance assessment
Technologies
Python, PowerShell, Perl, OAuth, OIDC, JWT, CSP, cryptography
Responsibilities
Scope and perform penetration tests from planning through reporting; Test web applications, mobile apps, APIs, and internal infrastructure; Review and reproduce findings from automated security tools; Assess exploitability, business impact, and remediation priority; Conduct secure source code reviews; Communicate findings with attack scenarios and remediation guidance; Support engineering teams in remediation closure.
Seniority
Senior, hands-on IC