eBay
Senior Information Security Engineer
Full details on LinkedIn
The complete job description, requirements, and application details are available on the original posting.
About eBay
eBay is a global online marketplace founded in 1995 by Pierre Omidyar. It connects millions of buyers and sellers across more than 190 markets, featuring 2.3 billion active listings of new, pre-owned, and refurbished items. eBay emphasizes trust and safety through innovations like the Feedback Forum, which supports honest trading between users. The platform offers personalized shopping experiences via its website and mobile apps, catering to individual buyers and small businesses. Sellers utilize various tools and technologies, including AI and computer vision, to reach a global audience. eBay is a leader in recommerce, promoting sustainable practices and reducing waste, with over 40% of its sales in 2024 coming from pre-owned items. The company achieved 100% renewable energy operations in 2024 and aims for net-zero emissions by 2045. eBay also supports nonprofits and fosters economic opportunities for entrepreneurs, making a significant positive impact on the economy.
Security at eBay
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
- EBay's AppSec philosophy centers on being a 'force multiplier' for developers rather than a gatekeeper.
- The mission is to ensure product security through optimized processes and solutions, with a heavy emphasis on embedding security directly into the SDLC and partnering with Engineering and Product teams to drive risk reduction.
Security Team
- The Application Security team at eBay is part of the Global Information Security organization.
- It is currently led by practitioners such as Nutan Kumar Panda (MTS 2, Information Security Engineer).
- As of April 2023, there are at least three active job postings for roles including Mobile Security and Security Compliance.
- The team operates as a 'force multiplier' rather than a gatekeeper, focusing on creating reusable frameworks and tooling.
Key Initiatives
Active initiatives include embedding security into the SDLC ('Shift Left'), developing scalable static and dynamic scanning solutions, and performing mobile application security architecture reviews. The team is also focused on fine-tuning mobile security rules and leveraging AI/LLM capabilities for security processes. There is no public evidence of a formal Security Champions program.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.