1 day ago
Responsibilities
- Own end-to-end security engineering work, including investigating alerts, findings, anomalies, and security requests, driving remediation, and documenting outcomes.
- Participate in the security on-call rotation and support incident response, alert triage, vulnerability workflows, access reviews, and security escalations.
- Build and maintain production tooling for alert enrichment, automated triage and routing, remediation workflows, access-review automation, and detection improvements.
- Lead investigations into suspected security events or compromises and coordinate appropriate responses.
- Identify operational toil and engineer durable solutions that improve security-team speed, consistency, and scalability.
- Partner with product and engineering teams to assess risks, review designs and implementation plans, and make practical security tradeoffs.
- Contribute across application, infrastructure, cloud, and product-security areas.
Requirements
- Hands-on experience as a security engineer, detection engineer, or similarly hands-on engineer in a technically demanding environment.
- Strong software-engineering skills in Python, Go, Ruby, or a similar language, including building maintainable tooling and contributing to production fixes.
- Experience investigating security signals, incidents, vulnerabilities, suspicious activity, or other ambiguous technical problems through resolution.
- Familiarity with security operations, incident response, vulnerability management, detection engineering, access reviews, or related operational-security workflows.
- Strong understanding of web, browser, infrastructure, or cloud security.
- Good judgment under pressure, a methodical investigative approach, and the ability to work independently through incomplete information.
- Strong communication and collaboration skills for explaining technical findings, risks, and recommended actions to clients and internal stakeholders.
- Preferred qualifications include AWS, GCP, or other cloud-security experience; detection engineering and security automation; bug-bounty or offensive-security exposure; IAM, secrets management, secure production access, or secure CI/CD; application security, infrastructure security, cryptography, or privacy engineering; fintech, payments, or blockchain experience; and experience shaping security operations or incident-response, vulnerability-management, or bug-bounty programs.
About Stripe
Stripe builds financial infrastructure for internet businesses, offering APIs and tools for online and in‑person payments, subscriptions, marketplaces/payouts, fraud prevention, identity, tax, issuing, and treasury. It monetizes through per‑transaction fees and SaaS pricing for advanced products. Founded in 2010 and headquartered in South San Francisco, Stripe is privately held and serves companies from startups to large enterprises worldwide.