Stripe
Security Engineer, Security Partnerships
Stripe, Indianapolis, Indiana, United States,
Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone’s reach while doing the most important work of your career.About the team
The Stripe Security team is dedicated to improving the security of Stripe and its users. Our users trust us with some of their most sensitive information, and we make security a first-class consideration in everything we do. Security concerns are ever-evolving, creating an extremely dynamic environment for the Security team.Our Security Partnership team enables Stripe to build secure-by-design products. We leverage strong relationships with both product teams and the rest of the security engineering organization to be successful. Our scope is primarily focused on reviewing early-stage designs, helping develop threat models, scaling impact via automation, curating security patterns, authoring security guidance, training, and championing security initiatives.We operate with an engineering mindset and are currently building out more self-service offerings for our customers. While we sometimes may execute on tactical projects, one of our core principles is to be strategic in our approach to solving problems.What you’ll do
Responsibilities
Work closely with product engineering teams to design solutions that are secure by default.Be a security subject matter expert and able to tailor answers to security questions from non-engineers and engineers alike.Lead threat modeling discussions and help teams strike the right balance between security, user experience, and product advancement.Scale security effort by empowering engineering teams with automation, security guidance, tooling, patterns, and training.Drive high impact, cross-team security initiatives.Develop a deep understanding of Stripe’s security primitives, frameworks, and invariants.Mentor teammates and others across the organization.Who you are
We’re looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement.5+ years of experience in security.Empathy, strong communication skills, and a deep respect for the power of collaboration.A learning mindset, regardless of level or experience.The ability to drive clear next steps when encountering ambiguous spaces without clear lines of ownership.An ability to think creatively and holistically about reducing risk in a complex environment.Breadth of applied knowledge across application and infrastructure security.Demonstrated experience securing applications in a cloud environment.Experience with containerization and orchestration technologies such as Docker and Kubernetes.The ability to think like an attacker, develop threat models, and help teams reason through different approaches to reducing security risk.A desire to sub-linearly scale security through simple design, abstraction, and education.Preferred qualifications
Software engineering experience in a production environment (nice-to-have).Mobile security experience (native apps and mobile SDKs).A remote location, in most cases, is defined as being 35 miles (56 kilometers) or more from one of our offices. While you would be welcome to come into the office for team/business meetings, on-sites, meet-ups, and events, our expectation is you would regularly work from home rather than a Stripe office. Stripe does not cover the cost of relocating to a remote location. We encourage you to apply for roles that match the location where you currently or plan to live.The annual US base salary range for this role is $163,100 - $244,700. This salary range may be inclusive of several career levels at Stripe and will be narrowed during the interview process based on a number of factors, including the candidate’s experience, qualifications, and location. Applicants interested in this role and who are not located in the US may request the annual salary range for their location during the interview process.Additional benefits for this role may include: equity, company bonus or sales commissions/bonuses; 401(k) plan; medical, dental, and vision benefits; and wellness stipends.At Stripe, we're looking for people with passion, grit, and integrity. You're encouraged to apply even if your experience doesn't precisely match the job description. Your skills and passion will stand out—and set you apart—especially if your career has taken some extraordinary twists and turns. At Stripe, we welcome diverse perspectives and people who think rigorously and aren't afraid to challenge assumptions. Join us.
#J-18808-Ljbffr
The Stripe Security team is dedicated to improving the security of Stripe and its users. Our users trust us with some of their most sensitive information, and we make security a first-class consideration in everything we do. Security concerns are ever-evolving, creating an extremely dynamic environment for the Security team.Our Security Partnership team enables Stripe to build secure-by-design products. We leverage strong relationships with both product teams and the rest of the security engineering organization to be successful. Our scope is primarily focused on reviewing early-stage designs, helping develop threat models, scaling impact via automation, curating security patterns, authoring security guidance, training, and championing security initiatives.We operate with an engineering mindset and are currently building out more self-service offerings for our customers. While we sometimes may execute on tactical projects, one of our core principles is to be strategic in our approach to solving problems.What you’ll do
Responsibilities
Work closely with product engineering teams to design solutions that are secure by default.Be a security subject matter expert and able to tailor answers to security questions from non-engineers and engineers alike.Lead threat modeling discussions and help teams strike the right balance between security, user experience, and product advancement.Scale security effort by empowering engineering teams with automation, security guidance, tooling, patterns, and training.Drive high impact, cross-team security initiatives.Develop a deep understanding of Stripe’s security primitives, frameworks, and invariants.Mentor teammates and others across the organization.Who you are
We’re looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement.5+ years of experience in security.Empathy, strong communication skills, and a deep respect for the power of collaboration.A learning mindset, regardless of level or experience.The ability to drive clear next steps when encountering ambiguous spaces without clear lines of ownership.An ability to think creatively and holistically about reducing risk in a complex environment.Breadth of applied knowledge across application and infrastructure security.Demonstrated experience securing applications in a cloud environment.Experience with containerization and orchestration technologies such as Docker and Kubernetes.The ability to think like an attacker, develop threat models, and help teams reason through different approaches to reducing security risk.A desire to sub-linearly scale security through simple design, abstraction, and education.Preferred qualifications
Software engineering experience in a production environment (nice-to-have).Mobile security experience (native apps and mobile SDKs).A remote location, in most cases, is defined as being 35 miles (56 kilometers) or more from one of our offices. While you would be welcome to come into the office for team/business meetings, on-sites, meet-ups, and events, our expectation is you would regularly work from home rather than a Stripe office. Stripe does not cover the cost of relocating to a remote location. We encourage you to apply for roles that match the location where you currently or plan to live.The annual US base salary range for this role is $163,100 - $244,700. This salary range may be inclusive of several career levels at Stripe and will be narrowed during the interview process based on a number of factors, including the candidate’s experience, qualifications, and location. Applicants interested in this role and who are not located in the US may request the annual salary range for their location during the interview process.Additional benefits for this role may include: equity, company bonus or sales commissions/bonuses; 401(k) plan; medical, dental, and vision benefits; and wellness stipends.At Stripe, we're looking for people with passion, grit, and integrity. You're encouraged to apply even if your experience doesn't precisely match the job description. Your skills and passion will stand out—and set you apart—especially if your career has taken some extraordinary twists and turns. At Stripe, we welcome diverse perspectives and people who think rigorously and aren't afraid to challenge assumptions. Join us.
#J-18808-Ljbffr