Cloud Security Engineer

Responsibilities

• Design, build, and operate the core security infrastructure used by all of Stripe's engineering teams in close collaboration with other stakeholders and our users
• Uphold our high engineering standards and bring consistency to the many codebases and processes you'll encounter
• Contribute to team learning by improving engineering standards, tooling, and processes
• Design and build durable solutions that will advance Stripe's security beyond the state of the art
• Help expand Stripe's cloud footprint on top of secure, paved roads and guardrails
• Optimize for security controls that have delightful user experiences
• Partner closely with infrastructure and engineering teams building integrations with our cloud infrastructure or adopting new cloud managed services
• Make impactful decisions about systems and security-their edge cases, failure modes, and life cycles
• Use data to determine appropriate baselines against which to measure security
• Define infrastructure that reliably feeds signals to threat teams
• Evaluate and prototype new security tools and practices

You may work on

• Designing and implementing controls that support security invariants and enforce our security principles while providing a surprisingly great user experience
• Providing a migration path for newly acquired companies onto the Stripe Secure Platform, embedding with their engineers and biasing for action
• CI tooling for platform-related configuration, including IAM roles, SCPs, and associated components
• Guardrails and security controls for both commonly used and newer cloud technologies
• Expanding our cloud identity infrastructure to provide paved paths for AI and agentic access
• Automation tooling for continually driving down permissions and access across our cloud services

Minimum requirements

• Empathy, strong communication skills, and a deep respect for the power of collaboration
• A learning mindset, regardless of level or experience
• The ability to drive clear next steps when encountering ambiguous spaces without clear lines of ownership
• High standards for code quality and a constructive attitude to help others raise the bar
• Software engineering experience in a high-stakes production environment
• A knack for considering how systems can fail and how to fix them
• An ability to think creatively and holistically about reducing risk in a complex environment
• Experience with security on one or more of AWS, Azure, or GCP

Preferred qualifications

• Experience conducting threat modeling of software or infrastructure in cloud-native environments
• Experience with Linux systems, Kubernetes, and container-based platforms
• Prior usage of security monitoring tools (e.g., CSPM, CNAAP)
• Experience in a multi-cloud or complex cloud environment