Cloud Security Engineer

Details

Who We Are

About Stripe

Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world's largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Stripe's mission is to increase the GDP of the internet.

About the Team

Stripe processes payments, runs marketplaces, detects fraud, helps entrepreneurs start businesses, and provides developer-friendly APIs. Nearly every system Stripe operates interacts with sensitive financial or personal data, making security a top priority.

The Cloud Security team accelerates Stripe's business priorities by building core security controls and services that empower teams to build quickly and securely on a well-governed cloud platform. The team also partners with infrastructure teams on critical business priorities involving novel infrastructure and integrations.

Responsibilities

• Design, build, and operate core security infrastructure used by Stripe's engineering teams in collaboration with stakeholders and users.
• Uphold high engineering standards across codebases and processes.
• Improve engineering standards, tooling, and processes to support team learning.
• Design and build durable solutions that advance Stripe's security capabilities.
• Expand Stripe's cloud footprint using secure, governed platforms, paved roads, and guardrails.
• Optimize security controls for a strong user experience.
• Partner with infrastructure and engineering teams integrating with cloud infrastructure or adopting new managed cloud services.
• Make decisions about systems and security, including edge cases, failure modes, and system life cycles.
• Use data to establish appropriate security baselines.
• Define infrastructure that reliably provides signals to threat teams.
• Evaluate and prototype new security tools and practices.
• Design and implement controls that support security invariants and enforce security principles.
• Provide migration paths for newly acquired companies onto the Stripe Secure Platform.
• Develop CI tooling for platform-related configuration, including IAM roles, SCPs, and associated components.
• Build guardrails and security controls for commonly used and emerging cloud technologies.
• Expand cloud identity infrastructure to provide paved paths for AI and agentic access.
• Develop automation tooling to continually reduce permissions and access across cloud services.

Requirements

• Empathy, strong communication skills, and a deep respect for collaboration.
• A learning mindset, regardless of level or experience.
• Ability to drive clear next steps in ambiguous situations without clear ownership.
• High standards for code quality and a constructive attitude toward helping others improve.
• Software engineering experience in a high-stakes production environment.
• Ability to analyze how systems can fail and determine how to address those failures.
• Creative and holistic thinking about reducing risk in complex environments.
• Experience with security on one or more of AWS, Azure, or GCP.

Preferred Qualifications

• Experience conducting threat modeling for software or infrastructure in cloud-native environments.
• Experience with Linux systems, Kubernetes, and container-based platforms.
• Experience using security monitoring tools such as CSPM and CNAAP.
• Experience in a multi-cloud or complex cloud environment.