Security Engineer, Vulnerability Management

Who we are

About Stripe

Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone’s reach while doing the most important work of your career.

About the team

In this role, you would join Stripe's Vulnerability Management team. Our vision is to create a culture of continuous excellence in managing vulnerabilities. We want to enhance customer trust by giving users context about threats and vulnerabilities affecting Stripe's systems. We aim to be a key partner in Stripe's risk management by providing visibility into vulnerabilities across Stripe's products and services.

What you’ll do

As a Software Engineer focused on Vulnerability Management at Stripe, you will use your software engineering expertise to find and prioritize vulnerabilities in our systems. Working closely with engineers across the company, you will drive the timely remediation of discovered vulnerabilities, playing a key role in Stripe's overall security and risk strategy.

In addition, you will continuously improve Stripe's security defenses by enhancing our vulnerability management processes and selecting effective scanning tools to uncover weaknesses.

Your core responsibilities as a Vulnerability Management Software Engineer will involve detecting vulnerabilities and coordinating fixes to prevent exploits that could impact Stripe or our users. You will serve as an advisor on security risks, collaborating cross-functionally to advocate for practices that strengthen the safety of Stripe's systems and data.

Responsibilities

• Identify vulnerabilities using automated tools and triage them appropriately
• Collaborate with other teams to drive remediation of vulnerabilities
• Contribute to our overall security and risk management strategy
• Continuously improve our security posture, processes, and tools

Who you are

We’re looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement.

Minimum requirements

• 5+ years engineering experience in a high-stakes production environment
• Empathy, strong communication skills and a deep respect for the power of collaboration
• Significant experience in vulnerability management
• Familiarity with automated vulnerability identification tools and triage processes
• Excellent problem-solving skills and attention to detail
• High standards for code quality and a constructive attitude to help others raise the bar
• Software engineering or related technical experience

Preferred qualifications

• An ability to think creatively and holistically about reducing risk in a complex environment
• Previous experience in a regulated industry (e.g., financial services, healthcare)