Offensive Security Engineer

About this role

As an Offensive Security Engineer, you will be part of Stripe's Proactive Threat team, responsible for identifying vulnerabilities and enhancing the security posture of Stripe's systems. Your role involves conducting penetration tests, leading red team engagements, and developing offensive security tools to fortify Stripe's infrastructure.

About the company

Stripe provides payment infrastructure and financial tools that help businesses accept payments, manage subscriptions, and move money globally. It serves startups through large enterprises with APIs for online and in-person commerce.

The team

Proactive Threat team

Stack

What you'll do

• Conduct penetration tests across various platforms and environments
• Plan and execute red team engagements
• Perform assessments to test detection and response capabilities
• Design and develop offensive security tools
• Lead offensive security projects and mentor junior members
• Stay updated on emerging threats and share insights

What we're looking for

• 5+ years of experience in offensive security or penetration testing
• Proficient in programming with Python or Go
• Deep understanding of web application security
• Hands-on experience with cloud platforms
• Familiarity with offensive security tools and frameworks
• Excellent communication skills

Nice to have

• Experience in fintech or regulated environments
• Background in vulnerability research or exploit development
• Familiarity with big data and log analysis tools
• Experience testing AI/ML systems for security weaknesses

Benefits

• Equity participation in Stripe's growth
• 401(k) plan with matching contributions
• Comprehensive medical, dental, and vision coverage
• Annual budget for training and conference attendance