Client Platform Security Engineer

at Stripe

📍 United States
📍 New York City, United States

USD 173,000-259,600 per year

MIDDLE

✅ Remote ✅ On-site

Tech Stack
Tag name is followed by "@" symbol and proficiency level value. About proficiency levels:

1-2 — basic awareness. Minimal hands-on experience, and a rudimentary understanding of the technology's purpose;

3-6 — daily use. Comfortable and regular usage, capable of handling common tasks and challenges related to the technology;

7-9 — you are an expert, you can teach others, you know all the pitfalls and tricks;

10 — exceptional knowledge, comprehensive understanding, and adeptness in all aspects of the technology, including advanced problem-solving. Think twice before claiming or demanding such level.

AWS @ 3 Android @ 3 ChromeOS Communication @ 6 Go @ 5 HTTP @ 3 Linux @ 3 Networking @ 3 Objective-C @ 5 Security @ 3 Swift @ 5 System Administration @ 3 iOS @ 5 macOS @ 5

Details

Stripe is a financial infrastructure platform for businesses. The Secure Devices team ensures that every client endpoint at Stripe adheres to rigorous security standards. The team operates on-device and backend services across multiple platform types, including capabilities for detecting and preventing data loss, restricting software execution, and securely managing device identities.

Responsibilities

Contribute to the secure design and implementation of Stripe's mobile expansion initiative.
Act as the subject matter expert on iOS security, advising partner teams on security best practices and secure-by-design architectures.
Design, build, and maintain endpoint security software, including telemetry and prevention capabilities through macOS system extensions running on Stripe macOS devices.
Collaborate with partner teams to define and measure the secure configuration of client platforms, including macOS, iOS, Android, and ChromeOS.
Operate high-RPS backend services providing critical controls and security configuration to Stripe endpoints.
Reduce usage of unapproved and untrusted software while creating a positive user experience for onboarding approved software.
Manage and improve device attestation flows to secure Stripe device and user identities.
Identify opportunities to improve security posture and resiliency against malware and advanced persistent threats on client platforms.
Build and maintain a user-focused data loss prevention program to protect against accidental and malicious data exfiltration.
Work with teams across Security, Infrastructure, and Corporate Engineering on strategic endpoint security projects, new platform infrastructure, and services securing more than 10,000 Stripe devices.

Requirements

4+ years of relevant experience securing iOS and/or macOS platforms.
4+ years of software engineering experience writing Go, Swift, or Objective-C.
Deep expertise securing devices within the Apple ecosystem.
Understanding of the current threat landscape and methods for defending Apple devices against modern threats.
High standards for code quality and a constructive attitude toward helping others improve.
Ability to think creatively and holistically about reducing risk in a complex environment.
Ability to drive clear next steps in ambiguous areas without clear ownership.
Empathy, strong communication skills, and respect for collaboration.

Preferred Qualifications

Experience implementing endpoint detection and response software.
Knowledge of macOS or iOS internals and how they can be used to build security controls and software.
Exposure to data loss prevention strategies.
Ability to develop backend networked applications capable of handling a high number of requests.
General proficiency in securing client devices.
Understanding of platform hardening, malware detection, and endpoint management through configuration as code.
Understanding of networking protocols, including TCP, DNS, SSH, TLS, and HTTP.
Linux system administration knowledge.
Experience securing alternative platforms, including Windows and Android.
Experience working with AWS cloud services.