Senior Product Security Engineer
Seattle · San Francisco · New York City · 5+ years experience · Full-time · Hybrid · Posted Oct 15, 2026
At a glance
- Experience
- 5+ years experience
- Employment
- Full-time
- Workplace
- Hybrid
- Location
- Seattle · San Francisco · New York City
About the role
- Lead security architecture and design reviews for high-priority Plaid products, working directly with engineering and product teams from early development through launch.
- Conduct threat modeling and technical security assessments of complex applications, APIs, distributed systems, and product workflows to identify material security risks.
- Evaluate authentication, authorization, trust boundaries, sensitive data flows, and business logic to identify potential vulnerabilities and abuse cases.
Responsibilities
- Lead security architecture and design reviews for high-priority Plaid products, working directly with engineering and product teams from early development through launch.
- Conduct threat modeling and technical security assessments of complex applications, APIs, distributed systems, and product workflows to identify material security risks.
- Evaluate authentication, authorization, trust boundaries, sensitive data flows, and business logic to identify potential vulnerabilities and abuse cases.
- Review application code, investigate security weaknesses, and validate that proposed fixes address the underlying risks.
- Assess security implications of new technologies and product capabilities, including AI-powered applications and agentic workflows.
- Partner with engineering leadership to prioritize material security risks, agree on mitigations, and track them through remediation or approved risk acceptance.
- Identify recurring security weaknesses, define reusable security requirements and secure design patterns, and partner with engineering teams to implement preventive controls.
- Leverage AI-assisted security analysis and testing to continuously improve security assessments and validate important security assumptions.
Requirements
- 5+ years of experience in product or application security, with strong expertise in secure architecture, application security fundamentals, and technical risk assessment.
- Experience leading security design reviews and threat modeling for complex applications, APIs, or distributed systems.
- Deep understanding of authentication, authorization, trust boundaries, sensitive data protection, and common application security vulnerabilities.
- Strong software engineering fundamentals, including the ability to read application code, analyze vulnerability paths, and evaluate security fixes.
- Experience assessing security risks in cloud-native applications and understanding the security implications of system architecture and implementation decisions.
- Ability to communicate complex security risks, recommend practical mitigations, and influence engineering and product leadership.
- Ability to operate independently in ambiguous environments and collaborate effectively across teams.
Preferred qualifications
- Experience securing AI-powered applications or agentic systems.
- Experience with penetration testing, vulnerability research, or security testing of complex business logic.
- Experience securing financial technology products or systems handling sensitive or regulated data.
Benefits
- medical
- dental
- vision
- 401(k)
Skills
- Application Security
- Threat Modeling
