What you will accomplish
Conduct technical security due diligence to identify vulnerabilities, technical debt, compliance gaps, and potential risks, providing clear recommendations to support business decisions.
Build and implement post-acquisition security integration plans, including identity and access management (IAM), Single Sign-On (SSO), vulnerability management, cloud security, logging, monitoring, and data protection controls.
Implement and improve security controls across cloud environments, including AWS, using tools such as Wiz and established security frameworks including CIS and NIST.
Assess application and infrastructure designs, perform threat modeling, and recommend practical improvements to address security risks.
Partner with development teams to integrate security testing, vulnerability detection, and secrets scanning into CI/CD pipelines, supporting secure software development practices.
Help ensure applications, infrastructure, and acquired businesses align with eBay’s information security policies and relevant regulatory and industry standards, including GDPR, ISO 27001, SOC 2, and NIST CSF.
Work with engineering leaders, IT, cloud teams, and business partners to communicate security findings, prioritize remediation, and balance security requirements with business objectives.
What you will bring
4+ years of hands-on experience in securing cloud environments, protecting applications, or security engineering, with exposure to security assessments, M&A due diligence, or technical integrations.
Practical experience securing AWS environments, including services such as IAM, GuardDuty, Security Hub, KMS, VPC, CloudTrail, and Config. Experience with Azure or GCP is beneficial.
Understanding of secure software development, threat modeling, OWASP Top 10, and security testing tools such as Snyk, SonarQube, Veracode, Burp Suite, or OWASP ZAP.
Experience with cloud security platforms such as Wiz or equivalent CSPM/CNAPP solutions, vulnerability management, secrets detection, and security monitoring tools.
Familiarity with CI/CD platforms such as GitHub Actions, GitLab CI, Jenkins, or Harness, and Infrastructure as Code tools such as Terraform or CloudFormation. Knowledge of container and Kubernetes security is an advantage.
Understanding of IAM, SSO, Zero Trust principles, and authentication protocols such as SAML, OAuth, and OIDC. Familiarity with security frameworks including NIST, ISO 27001, GDPR, or PCI-DSS is beneficial. Relevant security certifications such as CISSP, CCSP, OSCP, or AWS Certified Security would be a bonus.
Ability to explain technical security risks clearly, work effectively with multi-functional teams, influence security decisions, and recommend practical solutions that balance business needs with security requirements.
Additional Details
eBay is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, sexual orientation, gender identity, veteran status, and disability, or other legally protected status. If you have a need that requires accommodation, please contact us at talent@ebay.com. We will make every effort to respond to your request for accommodation as soon as possible. View our accessibility statement to learn more about eBay's commitment to ensuring digital accessibility for people with disabilities.
We use cookies to enhance your experience and may use AI tools for administrative tasks in the hiring process. To learn how we handle your personal data and use AI responsibly, please visit our Talent Privacy Notice, Privacy Center, and AI Hiring Guidelines.
