Security Engineer, Stripe

• Experience as a security engineer, detection engineer, or similarly hands-on engineer in a technically demanding environment
• Strong software-engineering skills in Python, Go, Ruby, or a similar language. You can build maintainable tooling and contribute directly to production fixes, not only one-off scripts
• Experience investigating security signals, incidents, vulnerabilities, suspicious activity, or other ambiguous technical problems through to resolution
• Familiarity with security operations, incident response, vulnerability management, detection engineering, access reviews, or related operational-security workflows
• A strong understanding of web, browser, infrastructure, or cloud security, with the ability to apply that understanding across a broad range of problems
• Good judgment under pressure, a methodical approach to investigation, and comfort working independently with agency despite incomplete information
• Strong communication and collaboration skills, including the ability to explain technical findings, risks, and recommended actions clearly to clients and internal stakeholders alike
• A self-directed approach to work: you notice gaps, make progress through ambiguity, and reliably close the loop
• At Stripe, we're looking for people with passion, grit, and integrity. You're encouraged to apply even if your experience doesn't precisely match the job description. Your skills and passion will stand out—and set you apart—especially if your career has taken some extraordinary twists and turns

Desirable

• As a Security Engineer at Privy, you will help keep a rapidly growing platform secure through hands-on investigation, operational ownership, and building real code to solve real problems
• You’ll work across security operations, incident response, application and infrastructure security, and internal tooling
• This is not a role limited to reviewing logs and designs or simply escalating findings
• You will carry real ownership for the day-to-day work that protects Privy: investigating anomalies, improving security workflows, and building the automation that makes the team faster and more effective over time
• You’ll work closely with engineers across Privy and alongside specialists in cryptography, application security, offensive security, and infrastructure security to turn security expertise into practical, durable outcomes
• Own security engineering work end to end: investigate alerts, findings, anomalies, and security requests; identify root causes; drive remediation; and clearly document outcomes
• Participate in Privy’s security on-call rotation, helping respond to incidents, triage alerts, support vulnerability workflows, complete access reviews, and handle security escalations
• Build and maintain production-quality tooling that reduces manual work, including alert enrichment, automated triage and routing, remediation workflows, access-review automation, and detection improvements
• Lead focused investigations into suspected security events or compromises, gathering evidence methodically and coordinating the appropriate response
• Proactively identify recurring sources of operational toil and engineer durable solutions that improve the team’s speed, consistency, and ability to scale
• Partner with product and engineering teams to assess security risks, review lower-complexity designs and implementation plans, and make practical security tradeoffs to deliver quickly with quality and soundness
• Contribute across Privy’s application, infrastructure, cloud, and product-security surface area, developing broad context while building deeper expertise over time