Security Engineer, Stripe

• 5+ years experience in offensive security or related field
• B.S. or M.S. Computer Science or related field, or equivalent
• Experience
• Proven knowledge of web application security, including
• Vulnerabilities such as OWASP Top10
• Experience with cloud computing platforms such as AWS, Azure, or
• Google Cloud Platform
• Knowledge of Python and SQL, and familiarity with other programming
• Languages
• Ability to analyze and interpret application logs to identify and
• Investigate potential security incidents
• Excellent written and verbal communication skills, including the
• Ability to produce clear and concise reports
• Ability to think creatively and holistically about identifying risk in
• A complex environment

Desirable

• Conduct complex offensive security assessments across a variety of
• Environments, including on-premise, cloud, and mobile applications
• Develop scripts and tools to automate offensive security assessments
• Provide technical expertise in areas such as network protocols,
• Operating systems, and web application security
• Work closely with other members of the Stripe security team to
• Identify and mitigate security risks and vulnerabilities
• Lead offensive security projects and mentor junior team members
• Produce clear and concise reports testing plans, engagement models,
• Findings, risks, and recommendations for remediation
• Keep up-to-date with the latest security threats, vulnerabilities, and
• Attack methods
• Act as the subject-matter expert and primary contact for stakeholder
• Teams invested in offensive security programs and Stripe-wide security
• Initiatives
• Collaborate effectively with teammates, leading projects, mentoring
• Others, and developing and championing quality standards within the
• Team