Description
PayPal is hiring a Staff API Security Engineer to build and operate an end-to-end API security capability plane, including linting, gateway traffic visibility, shadow-API detection, GraphQL and AsyncAPI checks, DAST tooling, pipeline access controls, and artifact-consumption verification. The role requires 5+ years of production software engineering experience, hands-on Python or Go development, deep API security expertise, knowledge of AI and agentic traffic, policy-as-code, DAST/SAST tooling, OWASP API Security Top 10 controls, and API traffic-protection mechanisms. The position offers a balanced hybrid model with three office days and two flexible work days, and includes healthcare coverage.
