Client Platform Security Engineer

Responsibilities

• Contribute to the secure design and implementation of Stripe’s mobile expansion initiative.
• Advise partner teams on iOS security best practices and secure-by-design architectures.
• Design, build, and maintain endpoint security software, including telemetry and prevention capabilities through macOS system extensions.
• Define and measure secure configurations across macOS, iOS, Android, and ChromeOS client platforms.
• Operate high-RPS backend services providing security controls and configuration to Stripe endpoints.
• Reduce use of unapproved and untrusted software while improving onboarding for approved software.
• Manage and improve device attestation flows protecting device and user identities.
• Improve client-platform security and resilience against malware and advanced persistent threats.
• Build and maintain a user-focused data loss prevention program.

Requirements

• At least 4 years of relevant experience securing iOS and/or macOS platforms.
• At least 4 years of software engineering experience writing Go, Swift, or Objective-C.
• Deep expertise securing devices within the Apple ecosystem.
• Understanding of modern threats and methods for defending Apple devices.
• Ability to maintain high code-quality standards, collaborate constructively, and navigate ambiguous ownership.
• Preferred experience implementing endpoint detection and response software.
• Preferred knowledge of macOS or iOS internals and their use in security controls and software.
• Preferred exposure to data loss prevention strategies and high-volume backend networked applications.
• Preferred understanding of platform hardening, malware detection, endpoint management through configuration as code, and networking protocols.
• Preferred Linux system administration knowledge, experience securing Windows and Android, and experience with AWS cloud services.