Security Engineer

Who we are

About Stripe

Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world’s largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career.

What you’ll do

Responsibilities

• Develop and work with supporting secure AI and LLM usage/integration both in products and within Security
• Develop building blocks to accept payments and move funds
• Stripes Core Products including Connect, Subscriptions, Checkout, RADAR, and Issuing
• Build/Enhance automated threat modeling tooling
• Identify and help reduce security debt across our product portfolio
• Work closely with product engineering teams to design solutions that are secure by default
• Tailor answers to security questions from non-engineers and engineers
• Lead threat modeling discussions and help teams strike the right balance between security, user experience and product advancement
• Scale security effort by empowering engineering teams with automation, security guidance, tooling, patterns and training
• Drive high impact, cross-team security initiatives
• Mentor teammates and others across the organization

Who you are

We're looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement.

Minimum requirements

Bachelor’s degree or foreign equivalent in Computer Science, Security Informatics, or related followed by 5 years of security engineering experience in a production environment.

Position also requires the following:

• 5 years of experience with multiple CSPs, including AWS and either GCP or Azure
• 5 years of experience with application and infrastructure security
• 5 years of experience developing threat models and helping teams reason through different approaches to reduce security risk