Product Security Engineer
Role summary
Plaid is seeking a Product Security Engineer who is a strong builder, focused on developing production-grade services, libraries, and frameworks to solve security challenges at scale. This role involves building and maintaining the vulnerability management orchestration service, automating workflows, and creating solutions to eliminate entire classes of vulnerabilities. The engineer will partner with product teams, support incident response and security awareness, and collaborate with the security platform organization to embed secure development practices. The ideal candidate has at least 2 years of experience building and scaling production services and can architect software systems to meet security, privacy, usability, scalability, and cost requirements.
The Product Security team is responsible for the processes, policies, controls, and engineering systems that secure Plaid’s developer- and consumer-facing products. The team focuses on areas including application security, vulnerability management, secure development lifecycle, penetration testing, and cloud security. Beyond setting standards, the team builds the services, components, and workflows that protect Plaid’s products at scale. By moving security “left,” Product Security makes the secure path the easiest path for engineers across the company.
Plaid is looking for a Product Security Engineer who is fundamentally a builder. Unlike traditional product security roles, this position is designed for a software engineer who wants to solve security challenges at scale by developing production-grade services, libraries, and frameworks. In this role, you’ll build and maintain Plaid’s vulnerability management orchestration service, automate workflows to reduce operational toil, and create solutions that eliminate entire classes of vulnerabilities. You’ll also partner closely with product engineers to ensure services meet security standards, support incident response and security awareness efforts, and collaborate across the security platform organization to deliver the engineering foundations that make secure development the default at Plaid.
Responsibilities
Build the secure engineering foundations that secure the future of digital finance.
Develop maintainable and secure software to enhance Plaid's security posture and create paved roads for developers for easy and default integration of security controls.
Design, develop, and maintain security-critical services and components.
Develop internal tooling to automate vulnerability detection, dependency management, and remediation workflows within the CI/CD pipeline.
Replace manual security gates with engineered solutions that allow product teams to ship faster and more securely.
Communicate effectively with managers and team members regarding project deliverables and progress.
Design and implement technical solutions that align with the evolving needs of the business.
Proactively identify and address security vulnerabilities in products and services.
Actively participate in incident response and security awareness initiatives.
Qualifications
2 + years of professional experience building and scaling production services.
Ability to architect software systems to meet security, privacy, usability, scalability and cost requirements.
While these experience and characteristics are not prerequisites, candidates who possess them would be well-suited for the role:
Experience building systems or services related to vulnerability management, data encryption, key management, secret management, user authentication, service authentication, authorization systems, and security policy enforcement.
Experience designing distributed systems and microservices with a focus on performance and reliability.
Familiarity with modern cloud infrastructure (AWS, Kubernetes, Terraform) and how to integrate security controls into them.
A passion for creating tools and libraries that other engineers love to use.
Passionate about educating others on security and privacy.
Sample Plaid interview questions
- 1
Design a language translation platform that works in real-time.
system designmedium - 2
Design a system for storing and serving images/videos.
system designmedium - 3
Use documentation to query their API and collect some data.
technicalaverage - 4
Is this window function performant?
technicaldifficult - 5
What is the syntax to make a private variable in JavaScript?
technicalaverage
Sign up for a personalized interview prep pack tailored to this role.
Similar roles
- Senior Product Security EngineerTines · United States
Product Security EngineerAdobe · San Jose, California, United States · Onsite
Senior Product Security EngineerBonterra · United States · Onsite- Senior Product Security EngineerJobs via Dice · Atlanta, Georgia, United States · Onsite
Senior Product Security EngineerRed Hat · Raleigh, North Carolina, United States · Remote