SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Plaid is seeking a Senior Product Security Engineer to join its Product Security team in Seattle. The role focuses on improving customer trust by assuring secure development and delivery of products and services, minimizing ecosystem risk, and preventing security incidents.
You will lead security architecture and design reviews for high-priority Plaid products, working directly with engineering and product teams from early development through launch. Key responsibilities include conducting threat modeling and technical security assessments of complex applications, APIs, distributed systems, and product workflows to identify material security risks. You will evaluate authentication, authorization, trust boundaries, sensitive data flows, and business logic to identify potential vulnerabilities and abuse cases.
Additional duties involve reviewing application code, investigating security weaknesses, and validating that proposed fixes address underlying risks. You will assess security implications of new technologies and product capabilities, including AI-powered applications and agentic workflows. You'll partner with engineering leadership to prioritize material security risks, agree on mitigations, and track them through remediation or approved risk acceptance.
You will identify recurring security weaknesses, define reusable security requirements and secure design patterns, and partner with engineering teams to implement preventive controls. The role leverages AI-assisted security analysis and testing to continuously improve security assessments and validate important security assumptions.
Plaid powers millions of people's financial lives through connections to 12,000 financial institutions across the US, Canada, UK, and Europe. The company works with thousands of organizations including Venmo, SoFi, Fortune 500 companies, and major banks.
REQUIREMENTS:
Must have:
- 5+ years of experience in product or application security, with strong expertise in secure architecture, application security fundamentals, and technical risk assessment
- Experience leading security design reviews and threat modeling for complex applications, APIs, or distributed systems
- Deep understanding of authentication, authorization, trust boundaries, sensitive data protection, and common application security vulnerabilities
- Strong software engineering fundamentals, including the ability to read application code, analyze vulnerability paths, and evaluate security fixes
- Experience assessing security risks in cloud-native applications and understanding the security implications of system architecture and implementation decisions
- Ability to communicate complex security risks, recommend practical mitigations, and influence engineering and product leadership
- Ability to operate independently in ambiguous environments and collaborate effectively across teams
Nice to have:
- Experience securing AI-powered applications or agentic systems
- Experience with penetration testing, vulnerability research, or security testing of complex business logic
- Experience securing financial technology products or systems handling sensitive or regulated data
