Security Engineer, New Grad

Details

Stripe is a financial infrastructure platform for businesses. The Security organization builds and maintains a secure financial infrastructure platform, protecting the sensitive data and systems that underpin a large portion of the global economy.

As a Security Engineer, New Grad, you will work across various security disciplines and own projects from start to finish. You will apply software engineering principles to security challenges, contribute to internal tools and automation, and help secure Stripe's complex environment.

Responsibilities

• Learn and apply secure-by-default design principles while working with product and infrastructure engineering teams.
• Develop a foundational understanding of security domains including threat detection, incident response, vulnerability management, and offensive security.
• Act as a security subject matter expert for both engineers and non-engineers.
• Contribute to internal tools and automation that scale security efforts across Stripe.
• Participate in threat modeling discussions, balancing security requirements with product advancement and user experience.
• Work on cross-functional projects in direct collaboration with other engineers.
• Provide meaningful feedback on code reviews and technical designs.
• Continuously improve security processes, tooling, and defenses.
• Develop a deep understanding of Stripe's security primitives, frameworks, and invariants.
• Provide actionable insights to identify, prevent, detect, and respond to anomalous or potentially malicious activity.

Requirements

Minimum Qualifications

• Currently enrolled in a Bachelor's or Master's program in Computer Science or a related field, graduating by Summer 2026.
• Some programming experience through side projects or coursework. Stripe primarily uses Java, Ruby, Python, JavaScript, Scala, and Go; familiarity with a specific language is not required if strong programming fundamentals and general knowledge are present.
• Experience from previous internships or collaborative, multi-person coding projects in a university or professional setting.
• Ability to learn unfamiliar systems and understand them through independent research, mentoring, and collaboration with subject matter experts.
• Aptitude for thinking like an attacker and reasoning through approaches to reducing security risk.

Preferred Qualifications

• Experience with code review practices and safely updating production systems.
• Familiarity with navigating and managing work in large codebases.
• Prior experience or coursework in cybersecurity, digital forensics, or incident response, including log analysis or capture-the-flag events.
• Familiarity with foundational security concepts such as the OWASP Top 10 web application vulnerabilities.
• Basic knowledge of SQL or experience analyzing medium to large datasets.
• Exposure to cloud computing platforms such as AWS, Azure, or Google Cloud Platform.
• An adversarial mindset and understanding of the goals, behaviors, and tactics, techniques, and procedures of threat actors.

The role offers the opportunity to apply software engineering principles and technologies such as AI to complex, high-stakes security challenges while learning from experienced teams in a rigorous and reliable environment.