高级软件工程师 - 产品安全
Senior Software Engineer - Product Security
我们相信，人们与财务的互动方式将在未来几年发生巨大变化。我们致力于通过构建数千名开发者用来打造自己产品的工具和体验，推动这一变革。Plaid 为数以百万计的人提供支持，帮助他们过上更健康的财务生活。我们与 Venmo、SoFi、多家财富 500 强公司以及许多大型银行合作，让人们能够轻松地将财务账户连接到他们想要使用的应用和服务。Plaid 的网络覆盖美国、加拿大、英国和欧洲的 12,000 家金融机构。公司成立于 2013 年，总部位于旧金山，在纽约、西雅图、华盛顿特区、罗利、伦敦和阿姆斯特丹设有办事处。
产品安全团队负责管理安全流程、政策和控制措施，以保护 Plaid 的面向开发者和消费者的各类产品。产品安全团队专注于应用安全、漏洞管理、安全开发生命周期、渗透测试和云安全等领域。我们构建保护 Plaid 产品的服务和组件。我们通过工程化通用库、模块和工作流，将安全措施“左移”，让安全路径成为所有 Plaid 工程师最容易选择的路径。
Plaid 正在寻找一位产品安全工程师加入我们的产品安全团队。
与传统的产品安全角色不同，该职位面向一位希望通过设计和构建生产级服务、库和框架来解决大规模安全挑战的高级软件工程师。我们的目标是让“安全路径”成为 Plaid 工程师唯一的选择。
职责
- 您将领导、设计并开发安全功能，以管理漏洞生命周期并自动化工作流程，减少 KTLO 的重复劳动。
- 您将负责维护和构建 Plaid 的漏洞管理编排服务，并开发解决方案以消除整个漏洞类别。
- 您还将与产品和工程团队合作，设计和构建安全控制措施，使我们的产品更加安全。
- 您将与产品工程师合作，确保 Plaid 服务符合安全标准。
- 您将帮助教育和支持其他工程团队，提高他们自身产品和服务的安全性。
- 您将协助 Plaid 的事件响应和安全意识计划。
- 您将与其他团队协作。
查看英文原文
We believe that the way people interact with their finances will drastically improve in the next few years. We’re dedicated to empowering this transformation by building the tools and experiences that thousands of developers use to create their own products. Plaid powers the tools millions of people rely on to live a healthier financial life. We work with thousands of companies like Venmo, SoFi, several of the Fortune 500, and many of the largest banks to make it easy for people to connect their financial accounts to the apps and services they want to use. Plaid’s network covers 12,000 financial institutions across the US, Canada, UK and Europe. Founded in 2013, the company is headquartered in San Francisco with offices in New York, Seattle, Washington D.C., Raleigh, London, and Amsterdam.
The Product Security team is responsible for managing the security processes, policies and controls to secure Plaid’s developer and consumer facing products.The product security team is focused on areas like Application Security, Vulnerability Management, Secure Development Lifecycle, Penetration Testing and Cloud Security. We build the services and components that protect Plaid’s products. We move security "left" by engineering common libraries, modules, and workflows that make the secure path the easiest path for all Plaid engineers.
Plaid is looking for a Product Security Engineer who is a builder to join our Product Security team.
Unlike traditional Product security roles, this position is for a Senior software engineer who wants to solve security challenges at scale by designing and building production-grade services, libraries, and frameworks. Our goal is to make the "secure path" the only path for Plaid developers.
The Role
- You will lead, design and develop security capabilities to manage vulnerabilities lifecycle and automate workflows to reduce KTLO toil.
- You will own, maintain, and build Plaid’s VM Orchestration service and build solutions to eliminate the entire vulnerability classes.
- You will also partner with product and engineering teams to architect and build security controls to make our products even more secure.
- You will consult with product engineers to ensure Plaid services meet security standards.
- You will help educate and support other engineering teams to improve security in their own products and services.
- You will assist with Plaid’s incident response and security awareness programs.
- You will collaborate with other security platform members and build necessary engineering solutions to meet their needs.
Responsibilities
- Build the secure engineering foundations that secure the future of digital finance.
- Develop maintainable and secure software to enhance Plaid's security posture and create paved roads for developers for easy and default integration of security controls.
- Design, develop, and maintain security-critical services and components.
- Develop internal tooling to automate vulnerability detection, dependency management, and remediation workflows within the CI/CD pipeline.
- Replace manual security gates with engineered solutions that allow product teams to ship faster and more securely.
- Communicate effectively with managers and team members regarding project deliverables and progress.
- Design and implement technical solutions that align with the evolving needs of the business.
- Proactively identify and address security vulnerabilities in products and services.
- Actively participate in incident response and security awareness initiatives.
Qualifications
- 5 + years of professional experience building and scaling production services
- Ability to architect and build software systems to meet security, privacy, usability, scalability and cost requirements.
While these experience and characteristics are not prerequisites, candidates who possess them would be well-suited for the role:
- Experience building systems or services related to vulnerability management, data encryption, key management, secret management, user authentication, service authentication, authorization systems, and security policy enforcement.
- Experience designing distributed systems and microservices with a focus on performance and reliability.
- Familiarity with modern cloud infrastructure (AWS, Kubernetes, Terraform) and how to integrate security controls into them.
- A passion for creating tools and libraries that other engineers love to use..
- Passionate about educating others on security and privacy.
Our mission at Plaid is to unlock financial freedom for everyone. To support that mission, we seek to build a diverse team of driven individuals who care deeply about making the financial ecosystem more equitable. We recognize that strong qualifications can come from both prior work experiences and lived experiences. We encourage you to apply to a role even if your experience doesn't fully match the job description. We are always looking for team members that will bring something unique to Plaid!
Plaid is proud to be an equal opportunity employer and values diversity at our company. We do not discriminate based on race, color, national origin, ethnicity, religion or religious belief, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, military or veteran status, disability, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state, and local laws. Plaid is committed to providing reasonable accommodations for candidates with disabilities in our recruiting process. If you need any assistance with your application or interviews due to a disability, please let us know at accommodations@plaid.com.
Please review our Candidate Privacy Notice here https://plaid.com/legal/#candidate-privacy-notice.
Additional compensation in the form(s) of equity and/or commission are dependent on the position offered. Plaid provides a comprehensive benefit plan, including medical, dental, vision, and 401(k). Pay is based on factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience and skillset, and location. Pay and benefits are subject to change at any time, consistent with the terms of any applicable compensation or benefit plans.