Cybersecurity Engineer – Offensive Security

About the role

Join PayPal’s Offensive Security team as a Cybersecurity Engineer. You will protect our products, applications, infrastructure and emerging technologies by performing hands‑on penetration testing and secure code reviews across web, mobile, APIs, cloud and other environments.

Key responsibilities

• Conduct independent penetration tests and security assessments on a variety of platforms.
• Perform secure code reviews for web, mobile, API and cloud services.
• Validate findings from AI‑assisted code reviews and automated security tools, assessing exploitability and business impact.
• Identify complex vulnerabilities, business‑logic flaws and provide realistic attack scenarios.
• Collaborate with engineering teams to translate findings into practical remediation guidance.

Required profile

• Strong background in offensive security and hands‑on penetration testing.
• Experience reviewing source code for security weaknesses.
• Ability to assess risk, prioritize findings and communicate technical details to non‑technical stakeholders.
• Self‑motivated, detail‑oriented and capable of working independently.

Required skills

• Penetration testing
• Secure code review
• Web, mobile, API security
• Cloud and infrastructure security