Security Engineer, Vulnerability Management

Who we are

About Stripe

Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone’s reach while doing the most important work of your career.

About the team

The mission of our Vulnerability Management team is to ensure the security and integrity of all technology systems within Stripe by proactively identifying and surfacing vulnerabilities that impact Stripe with automated tools, triaging disclosed vulnerabilities, and collaborating across teams to drive vulnerability remediation. We aim to create a culture of continuous vulnerability management excellence within Stripe, enhancing customer trust by providing our users context on the latest threats and vulnerabilities that truly impact our systems and applications.

What you’ll do

As a Vulnerability Management Engineer at Stripe, you'll be a part of the team responsible for identifying and prioritizing vulnerabilities across our platform. You'll use automated tools to identify potential threats and implement appropriate countermeasures. Your role heavily impacts Stripe's overall risk management strategy, and as such, you'll work cross-functionally to ensure vulnerabilities are handled effectively and efficiently.

Who you are

We’re looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement.

Responsibilities

• Identify vulnerabilities using automated tools and triage them appropriately
• Collaborate with other teams to drive remediation of vulnerabilities
• Contribute to our overall security and risk management strategy
• Continuously improve our security posture, processes, and tools

Minimum requirements

• 5+ years engineering experience in a high-stakes production environment
• Empathy, strong communication skills and a deep respect for the power of collaboration
• Significant experience in vulnerability management
• Familiarity with automated vulnerability identification tools and triage processes
• Excellent problem-solving skills and attention to detail
• High standards for code quality and a constructive attitude to help others raise the bar

Preferred qualifications

• An ability to think creatively and holistically about reducing risk in a complex environment
• Previous experience in a regulated industry (e.g., financial services, healthcare)
• Software engineering or related technical experience

By joining our team, you will have an unprecedented opportunity to put the global economy within everyone’s reach, securely.