Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone’s reach while doing the most important work of your career.
About the teamStripe will succeed at our mission of increasing the GDP of the internet only if we continue to prove ourselves worthy of our users’ trust. The team is a newly formed security team tasked with building the guardrails to extend Stripe’s secure platform, allowing engineers to leverage new technologies that best meet their needs as well as expanding and developing our network security controls. The team is an entry point to enable new technologies for product and platform teams, prioritising on business needs as well as building the tooling and controls that further enables self-serve, guaranteeing a high bar is maintained across all Stripe surfaces with security in-built into foundations. The team will own their work end-to-end, collaborating closely with users and stakeholders to deliver state of the art solutions and increase Stripe’s security posture and empower the next generation of Stripe products.
What you’ll doResponsibilities- Be a leader of strategy and planning. Scope and lead large technical projects with wide impact across many teams that will advance Stripe’s infrastructure security beyond state of the art and securely expand our cloud footprint across clouds and services
- Designing and implementing guardrails and controls that support security invariants and enforce our security principles while providing a surprisingly great user experience for commonly used and newer cloud technologies
- CI tooling for platform-related configuration
- Ensuring all cloud infrastructure is defined in code and strict change management is in place
We’re looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement.
Minimum requirements- Empathy, strong communication skills and a deep respect for the power of collaboration
- A learning mindset, regardless of level or experience
- 10+ years software engineering experience in a high-stakes production environment
- Experience writing high quality code in a major programming language and a constructive attitude to help others raise the bar
- Ability to drive clear next steps when encountering ambiguous spaces without clear lines of ownership
- Ability to think creatively and holistically about reducing risk in complex environments
- Deep experience with infrastructure on one, or more of, AWS, Azure, or GCP
- Experience conducting threat modeling of software or infrastructure in cloud native environments
- Prior usage of security monitoring tools (e.g. CSPM, CNAAP)
- Experience in a multi-cloud, or complex, cloud environment
