Senior Software Engineer

Responsibilities

• Lead, design and develop security capabilities to manage vulnerabilities lifecycle and automate workflows to reduce KTLO toil.
• Own, maintain, and build Plaid’s VM Orchestration service and build solutions to eliminate entire vulnerability classes.
• Partner with product and engineering teams to architect and build security controls to make our products even more secure.
• Consult with product engineers to ensure Plaid services meet security standards.
• Educate and support other engineering teams to improve security in their own products and services.
• Assist with Plaid’s incident response and security awareness programs.
• Collaborate with other security platform members and build necessary engineering solutions to meet their needs.
• Build the secure engineering foundations that secure the future of digital finance.
• Develop maintainable and secure software to enhance Plaid's security posture and create paved roads for developers for easy and default integration of security controls.
• Design, develop, and maintain security-critical services and components.
• Develop internal tooling to automate vulnerability detection, dependency management, and remediation workflows within the CI/CD pipeline.
• Replace manual security gates with engineered solutions that allow product teams to ship faster and more securely.
• Communicate effectively with managers and team members regarding project deliverables and progress.
• Design and implement technical solutions that align with the evolving needs of the business.
• Proactively identify and address security vulnerabilities in products and services.
• Actively participate in incident response and security awareness initiatives.

Qualifications

• 5+ years of professional experience building and scaling production services.
• Ability to architect and build software systems to meet security, privacy, usability, scalability and cost requirements.

Nice-to-Haves

• Experience building systems or services related to vulnerability management, data encryption, key management, secret management, user authentication, service authentication, authorization systems, and security policy enforcement.
• Experience designing distributed systems and microservices with a focus on performance and reliability.
• Familiarity with modern cloud infrastructure (AWS, Kubernetes, Terraform) and how to integrate security controls into them.
• A passion for creating tools and libraries that other engineers love to use.
• Passionate about educating others on security and privacy.