Skip to content

Open nowPosted 6 hours ago

Senior Product Security Engineer — Plaid

Thrive Capital portfolio7,916 open roles

Where
San Francisco, CA, USA
Work mode
On site
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Product Security Engineer — PlaidThrive Capital portfolio · San Francisco, CA, USA
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Thrive Capital portfolio's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

9.8% of postings close within 7 days. Measured by our own scanner across the market. Thrive Capital portfolio postings stay open a median of 28 days.

Share of postings closed within
  1. 1.9%1 day
  2. 3.9%3 days
  3. 9.8%7 days
  4. 15.6%14 days
  5. 33.8%30 days
This job: posted 6 hours ago

Thrive Capital portfolio median: 28 days open

The posting

We believe that the way people interact with their finances will drastically improve in the next few years. We’re dedicated to empowering this transformation by building the tools and experiences that thousands of developers use to create their own products. Plaid powers the tools millions of people rely on to live a healthier financial life. We work with thousands of companies like Venmo, SoFi, several of the Fortune 500, and many of the largest banks to make it easy for people to connect their financial accounts to the apps and services they want to use. Plaid’s network covers 12,000 financial institutions across the US, Canada, UK and Europe. Founded in 2013, the company is headquartered in San Francisco with offices in New York, Seattle, Washington D.C., Raleigh, London, and Amsterdam.

The mission of Plaid's Product Security Team is “Improve our customer’s trust by assuring secure development and delivery of products and services, minimizing risk to the ecosystem, and preventing security incidents.

Plaid's Product Security team helps engineering teams build secure products and continuously identify and reduce security risks. Our work spans security architecture and design, application security, vulnerability management, supply chain security, and security automation.

We work directly with product and engineering teams to identify risks early, influence secure architecture, and define security requirements. We build and leverage automated security capabilities to expand testing coverage, validate fixes, and reduce recurring vulnerabilities. As AI accelerates software development, our goal is to help Plaid maintain strong security without relying on manual reviews for every change.

This role is perfect for you if:

  • You enjoy understanding complex products and systems and finding security risks that are not immediately obvious.
  • You have strong application security fundamentals and are comfortable working directly with code and architecture.
  • You enjoy working closely with engineers and product teams to solve security problems early in development.
  • You can evaluate technical and business tradeoffs and influence architectural decisions.
  • You are excited about how AI is changing software development and how we approach product security.

About the role:

  • Lead security architecture and design reviews for high-priority Plaid products, working directly with engineering and product teams from early development through launch.
  • Conduct threat modeling and technical security assessments of complex applications, APIs, distributed systems, and product workflows to identify material security risks.
  • Evaluate authentication, authorization, trust boundaries, sensitive data flows, and business logic to identify potential vulnerabilities and abuse cases.
  • Review application code, investigate security weaknesses, and validate that proposed fixes address the underlying risks.
  • Assess security implications of new technologies and product capabilities, including AI-powered applications and agentic workflows.
  • Partner with engineering leadership to prioritize material security risks, agree on mitigations, and track them through remediation or approved risk acceptance.
  • Identify recurring security weaknesses, define reusable security requirements and secure design patterns, and partner with engineering teams to implement preventive controls.
  • Leverage AI-assisted security analysis and testing to continuously improve security assessments and validate important security assumptions.

Must haves:

  • 5+ years of experience in product or application security, with strong expertise in secure architecture, application security fundamentals, and technical risk assessment.
  • Experience leading security design reviews and threat modeling for complex applications, APIs, or distributed systems.
  • Deep understanding of authentication, authorization, trust boundaries, sensitive data protection, and common application security vulnerabilities.
  • Strong software engineering fundamentals, including the ability to read application code, analyze vulnerability paths, and evaluate security fixes.
  • Experience assessing security risks in cloud-native applications and understanding the security implications of system architecture and implementation decisions.
  • Ability to communicate complex security risks, recommend practical mitigations, and influence engineering and product leadership.
  • Ability to operate independently in ambiguous environments and collaborate effectively across teams.

Nice to have:

  • Experience securing AI-powered applications or agentic systems.
  • Experience with penetration testing, vulnerability research, or security testing of complex business logic.
  • Experience securing financial technology products or systems handling sensitive or regulated data.

Our mission at Plaid is to unlock financial freedom for everyone. To support that mission, we seek to build a diverse team of driven individuals who care deeply about making the financial ecosystem more equitable. We recognize that strong qualifications can come from both prior work experiences and lived experiences. We encourage you to apply to a role even if your experience doesn't fully match the job description. We are always looking for team members that will bring something unique to Plaid!

Plaid is proud to be an equal opportunity employer and values diversity at our company. We do not discriminate based on race, color, national origin, ethnicity, religion or religious belief, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, military or veteran status, disability, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state, and local laws. Plaid is committed to providing reasonable accommodations for candidates with disabilities in our recruiting process. If you need any assistance with your application or interviews due to a disability, please let us know at [email protected].

Please review our Candidate Privacy Notice here.

Additional compensation in the form(s) of equity and/or commission are dependent on the position offered. Plaid provides a comprehensive benefit plan, including medical, dental, vision, and 401(k). Pay is based on factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience and skillset, and location. Pay and benefits are subject to change at any time, consistent with the terms of any applicable compensation or benefit plans.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Thrive Capital portfolio's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Thrive Capital portfolio's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Thrive Capital portfolio's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.