Senior Product Security Engineer
Plaid is a financial data network and fintech infrastructure company that helps people securely connect financial accounts to digital financial services.
Funding history
Projects
About Plaid Inc.
Plaid provides developer infrastructure and financial tools for account connectivity, financial data access, bank payments, identity verification, AML monitoring, credit and underwriting, and fraud prevention. Its network supports thousands of fintech companies and more than 12,000 financial institutions across the United States, Canada, the United Kingdom, and Europe.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will lead security architecture and design reviews for priority products from early development through launch. You will conduct threat modeling and security assessments, review code and proposed fixes, evaluate data flows and access controls, and work with engineering leaders to prioritize and remediate security risks. You will also develop reusable security requirements and use AI-assisted analysis and testing to strengthen security assessments.
Requirements
- 5+ years of product or application security experience.
- Expertise in secure architecture, application security fundamentals, and technical risk assessment.
- Experience leading security design reviews and threat modeling for complex applications, APIs, or distributed systems.
- Deep understanding of authentication, authorization, trust boundaries, sensitive-data protection, and common application security vulnerabilities.
- Software engineering fundamentals, including reading application code, analyzing vulnerability paths, and evaluating security fixes.
- Experience assessing risks in cloud-native applications and system architecture.
- Ability to communicate security risks, recommend practical mitigations, and influence engineering and product leadership.
- Ability to work independently in ambiguous environments and collaborate across teams.
Responsibilities
- Lead security architecture and design reviews for high-priority products.
- Conduct threat modeling and technical security assessments for applications, APIs, distributed systems, and product workflows.
- Evaluate authentication, authorization, trust boundaries, sensitive data flows, and business logic for vulnerabilities and abuse cases.
- Review application code, investigate security weaknesses, and validate security fixes.
- Assess security implications of new technologies, AI-powered applications, and agentic workflows.
- Partner with engineering leadership to prioritize risks, agree mitigations, and track remediation or approved risk acceptance.
- Define reusable security requirements and secure design patterns to prevent recurring weaknesses.
- Leverage AI-assisted security analysis and testing to improve assessments and validate security assumptions.
Benefits
- Equity and/or commission, depending on the position offered.
- Medical insurance.
- Dental insurance.
- Vision insurance.
- 401(k) plan.
