We believe that the way people interact with their finances will drastically improve in the next few years. We’re dedicated to empowering this transformation by building the tools and experiences that thousands of developers use to create their own products. Plaid powers the tools millions of people rely on to live a healthier financial life. We work with thousands of companies like Venmo, SoFi, several of the Fortune 500, and many of the largest banks to make it easy for people to connect their financial accounts to the apps and services they want to use. Plaid’s network covers 12,000 financial institutions across the US, Canada, UK and Europe. Founded in 2013, the company is headquartered in San Francisco with offices in New York, Washington D.C., London and Amsterdam.
At Plaid, security isn't a cost center or a compliance checklist—it is our product. We sit at the intersection of thousands of applications, thousands of financial institutions, and hundreds of millions of consumers. We are the trust layer for the fintech ecosystem. If we don't build secure systems, the ecosystem doesn't function.
You will join a team responsible for the secure backbone of Plaid. As we look toward 2026, you will have the opportunity to define industry standards in areas like:
Next-Generation Authorization: We are moving beyond simple RBAC. You will help build a unified, centralized Authorization Platform that enforces fine-grained permissions across all human and non-human identities.
Agentic Security Capabilities: Build AI agents and tooling to automate functions like vulnerability patching, secure code reviews, and anomaly detection.
Zero Trust Architecture: You will evolve our internal token services and identity gateways to enforce rigorous Zero Trust controls for every service, device, and user in our fleet.
AI Guardrails: As Plaid adopts GenAI, you will build the "guardrails" and paved roads that allow our engineers to use LLMs securely, preventing data leakage and model abuse before they happen.
Cryptographic Services: You will own and scale our internal Key Management Systems, the central services for encryption, signing, and key rotation that protect our most sensitive data.
Network Security: You will help us sandbox our sensitive workloads from the internet, preventing command-and-control and data exfiltration.
