Security Engineer

Security Engineer IC-03

Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world's largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career.

Responsibilities

• Develop and work with supporting secure AI and LLM usage/integration both in products and within Security;
• Develop building blocks to accept payments and move funds;
• Stripe's Core Products including Connect, Subscriptions, Checkout, Radar, and Issuing;
• Build/Enhance automated threat modeling tooling;
• Identify and help reduce security debt across our product portfolio;
• Work closely with product engineering teams to design solutions that are secure by default;
• Tailor answers to security questions from non-engineers and engineers;
• Lead threat modeling discussions and help teams strike the right balance between security, user experience and product advancement;
• Scale security effort by empowering engineering teams with automation, security guidance, tooling, patterns and training;
• Drive high impact, cross-team security initiatives;
• Mentor teammates and others across the organization.

We're looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement.

Minimum requirements

Bachelor's degree or foreign equivalent in Computer Science, Security Informatics, or related followed by 5 years of security engineering experience in a production environment.

Position also requires the following:

• 5 years of experience with multiple CSPs, including AWS and either GCP or Azure;
• 5 years of experience with application and infrastructure security;
• 5 years of experience developing threat models and helping teams reason through different approaches to reduce security risk; and
• 4 years of experience with containerization and orchestration technologies including Docker or Kubernetes.

Salary: $194,251 - $268,400/yr.

This salary range represents the base salary range for the role and any sales commissions / sales bonuses targets, if applicable, would be in addition to the base salary.

40 hrs/week

Full remote work permitted.

Multiple Positions Available.

Additional benefits for this role may include: equity, company bonus or sales commissions/bonuses; 401(k) plan; medical, dental, and vision benefits; and wellness stipends. CA18

#LI-DNI

This role is available either in an office or a remote location (35+ miles or 56+ km from a Stripe office).

Office-assigned Stripes spend at least 50% of the time in a given month in their local office or with users. This hits a balance between bringing people together for in-person collaboration and learning from each other, while supporting flexibility about how to do this in a way that makes sense for individuals and their teams.

A remote location is defined as being 35 miles (56 kilometers) or more from one of our offices. While you would be welcome to come into the office for team/business meetings, on-sites, meet-ups, and events, our expectation is you would regularly work from home rather than a Stripe office. Stripe does not cover the cost of relocating to a remote location. We encourage you to apply for roles that match the location where you currently live or plan to live.

Office locations

South San Francisco HQ

Remote locations

Remote in United States

Job type

Full time