Product Security Engineer

Who we are

About Stripe

Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone’s reach while doing the most important work of your career.

About the team

Our Product Security team works on secure-by-design and deep product partnership. We build strong relationships with other teams and help them build secure software. This includes reviewing early-stage designs, helping develop threat models, scaling impact by curating security patterns, guidance, training; and championing security initiatives.

Some examples of the teams and critical initiatives you might be involved in partnering with:

• Link, Stripe’s first consumer focused product providing a B2C option at global scale
• Better building blocks to accept payments, move funds, and exchange between fiat and crypto
• Stripes Core Products ranging from Connect, Subscriptions, Checkout, and more.

What you’ll do

Responsibilities

• Work closely with product engineering teams to design solutions that are secure by default
• Be a security subject matter expert and able to tailor answers to security questions from non-engineers and engineers, alike
• Lead threat modeling discussions and help teams strike the right balance between security, user experience and product advancement
• Drive high impact, cross-team security initiatives 
• Scale security effort by empowering engineering teams with the right guidance, patterns and training
• Develop a deep understanding of Stripe’s security primitives, frameworks, and invariants
• Mentor teammates and others across the organization

Who you are

We’re looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement.

Minimum requirements

• • 5+ years of security engineering experience
  • Strong communication skills, is accustomed to working closely with engineering teams and has the ability to influence key decisions
  • Breadth of applied knowledge across application security
  • Software engineering experience in a production environment across multiple programming languages
  • The ability to think like an attacker, develop threat models and help teams reason through different approaches to reducing risk
  • A desire to sub-linearly scale security through simple design, abstraction and education