Stripe is a financial infrastructure platform for businesses, enabling companies to accept payments, grow revenue, and accelerate new business opportunities.
Nearly every system Stripe operates interacts with sensitive financial or personal data, making security a top priority.
About the team
The Cloud Security team accelerates Stripe's business priorities by building core security controls and services that empower teams to build quickly and securely on top of a well-governed cloud platform.
Responsibilities
Design, build, and operate the core security infrastructure used by all of Stripe's engineering teams
Uphold high engineering standards and bring consistency to codebases and processes
Contribute to team learning by improving engineering standards, tooling, and processes
Design and build durable solutions that advance Stripe's security
Help expand Stripe's cloud footprint on top of secure, paved roads and guardrails
Optimize for security controls with delightful user experiences
Partner closely with infrastructure and engineering teams
Make impactful decisions about systems and security
Use data to determine appropriate baselines against which to measure security
Define infrastructure that reliably feeds signals to threat teams
Evaluate and prototype new security tools and practices
Requirements
Empathy, strong communication skills, and a deep respect for collaboration
A learning mindset
The ability to drive clear next steps when encountering ambiguous spaces
High standards for code quality
Software engineering experience in a high-stakes production environment
A knack for considering how systems can fail and how to fix them
An ability to think creatively and holistically about reducing risk
Experience with security on one or more of AWS, Azure, or GCP
Preferred qualifications
Experience conducting threat modeling of software or infrastructure in cloud-native environments
Experience with Linux systems, Kubernetes, and container-based platforms
Prior usage of security monitoring tools (e.g., CSPM, CNAAP)
Experience in a multi-cloud or complex cloud environment