23
Job Description
SECURITY ENGINEER
you are encouraged to apply. The preferred qualifications are a bonus, not a requirement.
Overview
Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone’s reach while doing the most important work of your career.
Job Description
- We’re looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement.
Responsibilities
- Work closely with product engineering teams to design solutions that are secure by default
- Be a security subject matter expert and able to tailor answers to security questions from non-engineers and engineers, alike
- Lead threat modeling discussions and help teams strike the right balance between security, user experience and product advancement
- Scale security effort by empowering engineering teams with automation, security guidance, tooling, patterns and training.
- Drive high impact, cross-team security initiatives
- Develop a deep understanding of Stripe’s security primitives, frameworks, and invariants
- Mentor teammates and others across the organization
Qualification
- 5+ years of experience in security
- Empathy, strong communication skills and a deep respect for the power of collaboration
- A learning mindset, regardless of level or experience
- The ability to drive clear next steps when encountering ambiguous spaces without clear lines of ownership
- An ability to think creatively and holistically about reducing risk in a complex environment
- Breadth of applied knowledge across application and infrastructure security
- Demonstrated experience securing applications in a cloud environment
- Experience with containerization and orchestration technologies such as Docker and Kubernetes.
- The ability to think like an attacker, develop threat models and help teams reason through different approaches to reducing security risk
- A desire to sub-linearly scale security through simple design, abstraction and education
Other Requirements
- Software engineering experience in a production environment (nice-to-have)
- Mobile security experience (native apps and mobile SDKs)
Location: Remote.
Apply: SECURITY ENGINEER
