Security Engineer

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world’s largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career. What you’ll do Responsibilities - Design and implement infrastructure security controls for the company’s “Secure Platform,” ensuring compliance with security principles while optimizing user experience - Develop and manage infrastructure as code (IaC) for cloud security configurations, maintaining consistency and enforcing strict change management practices - Conduct security assessments and threat modeling to identify vulnerabilities in cloud-native applications, collaborating with cross-functional teams to address risks - Evaluate and prototype new security tools and methodologies to enhance the security posture of company’s cloud environment, utilizing data driven metrics to inform decisions - Foster a culture of continuous improvement by sharing best practices, refining engineering standards, and contributing to the team’s learning and development Who you are We're looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement. Minimum requirements Bachelor’s degree or foreign equivalent in Computer Science, Information Technology, or related field followed by 2 years of security solutions IT experience. Position also requires the following: - 2 years of experience building software applications in Go, Python, Java, JavaScript, or C# - 2 years of experience with AWS or Azure cloud infrastructure-as-a-service providers - 1 year of experience securing cloud applications and endpoints - 1 year of experience with security threat modeling, incident response, or investigations - 1 year of experience with Infrastructure as Code utilizing Terraform or CloudFormation Salary: $158,800 - $238,200/yr. This salary range represents the base salary range for the role and any sales commissions/sales bonuses targets, if applicable, would be in addition to the base salary. 40 hrs/week 50% remote work permitted. Multiple Positions Available. Additional benefits for this role may include: equity, company bonus or sales commissions/bonuses; 401(k) plan; medical, dental, and vision benefits; and wellness stipends. WA17 #LI-DNI

Bachelor’s degree or foreign equivalent in Computer Science, Information Technology, or related field followed by 2 years of security solutions IT experience. 2 years of experience building software applications in Go, Python, Java, JavaScript, or C#. 2 years of experience with AWS or Azure cloud infrastructure-as-a-service providers. 1 year of experience securing cloud applications and endpoints. 1 year of experience with security threat modeling, incident response, or investigations. 1 year of experience with Infrastructure as Code utilizing Terraform or CloudFormation.

Design and implement infrastructure security controls for the company’s “Secure Platform,” ensuring compliance with security principles while optimizing user experience. Develop and manage infrastructure as code (IaC) for cloud security configurations, maintaining consistency and enforcing strict change management practices. Conduct security assessments and threat modeling to identify vulnerabilities in cloud-native applications, collaborating with cross-functional teams to address risks. Evaluate and prototype new security tools and methodologies to enhance the security posture of company’s cloud environment, utilizing data driven metrics to inform decisions. Foster a culture of continuous improvement by sharing best practices, refining engineering standards, and contributing to the team’s learning and development.