Sr Analyst, Cybersecurity Threat

PayPal is hiring a Sr Analyst, Cybersecurity Threat in Chennai.

The Company PayPal has been revolutionizing commerce globally for more than 25 years. Creating innovative experiences that make moving money, selling, and shopping simple, personalized, and secure, PayPal empowers consumers and businesses in approximately 200 markets to join and thrive in the global economy. We operate a global, two-sided network at scale that connects hundreds of millions of merchants and consumers. We help merchants and consumers connect, transact, and complete payments, whether they are online or in person. PayPal is more than a connection to third-party payment networks. W

Requirements

• 3+ years relevant experience and a Bachelor’s degree OR Any equivalent combination of education and experience.

Additional Responsibilities & Preferred Qualifications:

Your way to impact:

Performs hands-on penetration testing and vulnerability validation across web, mobile, API, and cloud environments. Reviews and reproduces findings from AI-assisted code reviews and automated security tools to assess exploitability, business impact, and remediation priority. Conducts secure code reviews to identify complex, business logic vulnerabilities, and partners with engineering teams to communicate risk and drive remediation to closure. Individual-contributor role requiring end-to-end ownership of assessments, from scoping through reporting and remediation support.

In your day-to-day role you will be responsible for

• Scope and perform penetration tests from planning through reporting and remediation support.
• Perform hands-on testing of web applications, mobile applications, APIs, thick client applications, and internal infrastructure.
• Review and validate potential vulnerabilities identified through AI assisted code reviews and other automated security tools.
• Reproduce findings and assess exploitability, business impact, severity, remediation priority, and whether a finding is a false positive.
• Perform secure source code reviews and identify complex vulnerabilities, including business logic flaws.
• Test authentication, authorization, session management, OAuth, OIDC, JWT, CSP, cryptography, and other application security controls.
• Understand cloud environments, APIs, identity flows, and common attacker techniques.
• Evaluate AI and ML systems and use automation to improve the efficiency and depth of testing.
• Communicate findings with clear context, reproduction steps, attack scenarios, and practical remediation guidance.
• Support engineering teams through remediation and closure of security findings.
• Assess systems against requirements such as PCI DSS and provide actionable remediation guidance.

About PayPal

See the company's official careers page for full details, then apply using the button below.