Software Engineer, Vulnerability Management

at Stripe

📍 United States

USD 142,600-213,800 per year

MIDDLE

✅ Remote

Tech Stack
Tag name is followed by "@" symbol and proficiency level value. About proficiency levels:

1-2 — basic awareness. Minimal hands-on experience, and a rudimentary understanding of the technology's purpose;

3-6 — daily use. Comfortable and regular usage, capable of handling common tasks and challenges related to the technology;

7-9 — you are an expert, you can teach others, you know all the pitfalls and tricks;

10 — exceptional knowledge, comprehensive understanding, and adeptness in all aspects of the technology, including advanced problem-solving. Think twice before claiming or demanding such level.

Communication @ 6 Security @ 3

Details

Stripe's Vulnerability Management team works to surface vulnerabilities at scale across Stripe and enhance customer trust by providing visibility into threats and vulnerabilities affecting its systems, products, and services.

In this role, you will use software engineering expertise to identify and prioritize vulnerabilities, drive timely remediation, improve vulnerability management processes, and select effective scanning tools. You will build data- and agent-backed systems to surface vulnerabilities, coordinate fixes to prevent exploits, advise on security risks, and collaborate cross-functionally to strengthen the security of Stripe's systems and data.

Responsibilities

Identify vulnerabilities using automated tools and triage them appropriately.
Collaborate with other teams to drive vulnerability remediation.
Contribute to Stripe's overall security and risk management strategy.
Continuously improve security posture, processes, and tools.

Requirements

2+ years of industry software engineering experience, excluding internships and co-ops.
Software engineering experience within the security domain.
Empathy, strong communication skills, and a deep respect for collaboration.
Excellent problem-solving skills and attention to detail.
High standards for code quality and a constructive attitude that helps others raise the bar.

Preferred Qualifications

Ability to think creatively and holistically about reducing risk in a complex environment.
Familiarity with automated vulnerability identification tools and triage.
Experience delivering successful projects using agents to automate human review processes.