Senior Product Security Engineer

We believe that the way people interact with their finances will drastically improve in the next few years. We’re dedicated to empowering this transformation by building the tools and experiences that thousands of developers use to create their own products. Plaid powers the tools millions of people rely on to live a healthier financial life. We work with thousands of companies like Venmo, SoFi, several of the Fortune 500, and many of the largest banks to make it easy for people to connect their financial accounts to the apps and services they want to use. Plaid’s network covers 12,000 financial institutions across the US, Canada, UK and Europe. Founded in 2013, the company is headquartered in San Francisco with offices in New York, Seattle, Washington D.C., Raleigh, London, and Amsterdam.

The mission of Plaid's Product Security Team is “Improve our customer’s trust by assuring secure development and delivery of products and services, minimizing risk to the ecosystem, and preventing security incidents."

Plaid's Product Security team helps engineering teams build secure products and continuously identify and reduce security risks. Our work spans security architecture and design, application security, vulnerability management, supply chain security, and security automation.

We work directly with product and engineering teams to identify risks early, influence secure architecture, and define security requirements. We build and leverage automated security capabilities to expand testing coverage, validate fixes, and reduce recurring vulnerabilities. As AI accelerates software development, our goal is to help Plaid maintain strong security without relying on manual reviews for every change.

This role is perfect for you if:

• You enjoy understanding complex products and systems and finding security risks that are not immediately obvious.

• You have strong application security fundamentals and are comfortable working directly with code and architecture.

• You enjoy working closely with engineers and product teams to solve security problems early in development.

• You can evaluate technical and business tradeoffs and influence architectural decisions.

• You are excited about how AI is changing software development and how we approach product security.

About the role:- Lead security architecture and design reviews for high-priority Plaid products, working directly with engineering and product teams from early development through launch.

• Conduct threat modeling and technical security assessments of complex applications, APIs, distributed systems, and product workflows to identify material security risks.

• Evaluate authentication, authorization, trust boundaries, sensitive data flows, and business logic to identify potential vulnerabilities and abuse cases.

• Review application code, investigate security weaknesses, and validate that proposed fixes address the underlying risks.

• Assess security implications of new technologies and product capabilities, including AI-powered applications and agentic workflows.

• Partner with engineering leadership to prioritize material security risks, agree on mitigations, and track them through remediation or approved risk acceptance.

• Identify recurring security weaknesses, define reusable security requirements and secure design patterns, and partner with engineering teams to implement preventive controls.

• Leverage AI-assisted security analysis and testing to continuously improve security assessments and validate important security assumptions.

Must haves:- 5+ years of experience in product or application security, with strong expertise in secure architecture, application security fundamentals, and technical risk assessment.

• Experience leading security design reviews and threat modeling for complex applications, APIs, or distributed systems.

• Deep understanding of authentication, authorization, trust boundaries, sensitive data protection, and common application secu...