At eBay, we're more than a global ecommerce leader — we’re changing the way the world shops and sells. Our platform empowers millions of buyers and sellers in more than 190 markets around the world. We’re committed to pushing boundaries and leaving our mark as we reinvent the future of ecommerce for enthusiasts.
Our customers are our compass, authenticity thrives, bold ideas are welcome, and everyone can bring their unique selves to work — every day. We're in this together, sustaining the future of our customers, our company, and our planet.
Join a team of passionate thinkers, innovators, and dreamers — and help us connect people and build communities to create economic opportunity for all.
About the team and the role
eBay is seeking a Security Engineer to support security strategy and execution across business adjacencies, acquisitions, and joint ventures!
In this role, you will play a key part in assessing security risks during mergers and acquisitions (M&A), planning and delivering security integrations, and strengthening security architecture across diverse technology environments.
You will work closely with cloud engineering, corporate development, IT, and engineering teams to identify risks, implement security controls, and ensure newly acquired businesses align with eBay’s security standards.
This is an opportunity to combine hands-on security engineering with technical advisory responsibilities, working across cloud security, application security, identity management, and security architecture.
What you will accomplish:
Conduct technical security due diligence to identify vulnerabilities, technical debt, compliance gaps, and potential risks, providing clear recommendations to support business decisions.
Build and implement post-acquisition security integration plans, including identity and access management (IAM), Single Sign-On (SSO), vulnerability management, cloud security, logging, monitoring, and data protection controls.
Implement and improve security controls across cloud environments, including AWS, using tools such as Wiz and established security frameworks including CIS and NIST.
Assess application and infrastructure designs, perform threat modeling, and recommend practical improvements to address security risks.
Partner with development teams to integrate security testing, vulnerability detection, and secrets scanning into CI/CD pipelines, supporting secure software development practices.
Help ensure applications, infrastructure, and acquired businesses align with eBay’s information security policies and relevant regulatory and industry standards, including GDPR, ISO 27001, SOC 2, and NIST CSF.
Work with engineering leaders, IT, cloud teams, and business partners to communicate security findings, prioritize remediation, and balance security requirements with business objectives.
What you will bring:
4+ years of hands-on experience in securing cloud environments, protecting applications, or security engineering, with exposure to security assessments, M&A due diligence, or technical integrations.
Practical experience securing AWS environments, including services such as IAM, GuardDuty, Security Hub, KMS, VPC, CloudTrail, and Config. Experience with Azure or GCP is beneficial.
Understanding of secure software development, threat modeling, OWASP Top 10, and security testing tools such as Snyk, SonarQube, Veracode, Burp Suite, or OWASP ZAP.
Experience with cloud security platforms such as Wiz or equivalent CSPM/CNAPP solutions, vulnerability management, secrets detection, and security monitoring tools.
Familiarity with CI/CD platforms such as GitHub Actions, GitLab CI, Jenkins, or Harness, and Infrastructure as Code tools such as Terraform or CloudFormation. Knowledge of container and Kubernetes security is an advantage.
Understanding of IAM, SSO, Zero Trust principles, and authentication protocols such as SAML, OAuth, and OIDC. Familiarity with security frameworks including NIST, ISO 27001, GDPR, or PCI-DSS is…