Software Engineer - Security Engineering

About the Role

Security Engineering is the engineering function inside the Plaid security org that focuses on developing industry-leading security systems and infrastructure. Security Engineering owns most of Plaid’s security-related infrastructure: secure data storage, key management systems, internal identity platform, internal authentication systems, internal permission management, and internal authorization service. We develop solutions across data encryption, key management, access control, and data loss prevention to protect sensitive consumer data.

• You will develop security capabilities to secure Plaid infrastructure and to secure sensitive data access.
• You will own, maintain, and build Plaid’s security infrastructure and services like Key Management System and Secure Token Service.
• You will consult with product engineers to ensure Plaid services meet security standards.
• You will help educate and support other engineering teams to improve security in their own products and services.
• You will assist with Plaid’s incident response and security awareness programs.
• You will collaborate with other security platform members and build necessary engineering solutions to meet their needs.

Responsibilities

• Develop maintainable and secure software to enhance Plaid's infrastructure and protect sensitive data.
• Communicate effectively with managers and team members regarding project deliverables and progress.
• Design and implement technical solutions that align with the evolving needs of the business.
• Actively participate in incident response and security awareness initiatives.

Qualifications

• Experience building scalable systems and services.
• Experience architecting software systems to meet security, privacy, usability, scalability and cost requirements.

Preferred Qualifications

• Experience building systems or services related to data encryption, key management, secret management, certificate management, transport security, user authentication, device authentication, service authentication, permission management, authorization systems, and security policy enforcement.
• Experience with securing critical and sensitive information assets.
• Experience with data platforms and data infrastructure.
• Experience with threat modeling, security architecture reviews, or incident response.
• Passionate about educating others on security and privacy.