Client Platform Security Engineer

Details

Stripe is a financial infrastructure platform for businesses. The Secure Devices team ensures that every client endpoint at Stripe adheres to rigorous security standards. The team operates on-device and backend services across multiple platform types, including capabilities for detecting and preventing data loss, restricting software execution, and securely managing device identities.

Responsibilities

• Contribute to the secure design and implementation of Stripe's mobile expansion initiative.
• Act as the subject matter expert on iOS security, advising partner teams on security best practices and secure-by-design architectures.
• Design, build, and maintain endpoint security software, including telemetry and prevention capabilities through macOS system extensions running on Stripe macOS devices.
• Collaborate with partner teams to define and measure the secure configuration of client platforms, including macOS, iOS, Android, and ChromeOS.
• Operate high-RPS backend services providing critical controls and security configuration to Stripe endpoints.
• Reduce usage of unapproved and untrusted software while creating a positive user experience for onboarding approved software.
• Manage and improve device attestation flows to secure Stripe device and user identities.
• Identify opportunities to improve security posture and resiliency against malware and advanced persistent threats on client platforms.
• Build and maintain a user-focused data loss prevention program to protect against accidental and malicious data exfiltration.
• Work with teams across Security, Infrastructure, and Corporate Engineering on strategic endpoint security projects, new platform infrastructure, and services securing more than 10,000 Stripe devices.

Requirements

• 4+ years of relevant experience securing iOS and/or macOS platforms.
• 4+ years of software engineering experience writing Go, Swift, or Objective-C.
• Deep expertise securing devices within the Apple ecosystem.
• Understanding of the current threat landscape and methods for defending Apple devices against modern threats.
• High standards for code quality and a constructive attitude toward helping others improve.
• Ability to think creatively and holistically about reducing risk in a complex environment.
• Ability to drive clear next steps in ambiguous areas without clear ownership.
• Empathy, strong communication skills, and respect for collaboration.

Preferred Qualifications

• Experience implementing endpoint detection and response software.
• Knowledge of macOS or iOS internals and how they can be used to build security controls and software.
• Exposure to data loss prevention strategies.
• Ability to develop backend networked applications capable of handling a high number of requests.
• General proficiency in securing client devices.
• Understanding of platform hardening, malware detection, and endpoint management through configuration as code.
• Understanding of networking protocols, including TCP, DNS, SSH, TLS, and HTTP.
• Linux system administration knowledge.
• Experience securing alternative platforms, including Windows and Android.
• Experience working with AWS cloud services.