Security Engineer

US RemoteWebsite

Apply on Stripe's site →

At a Glance

3+ years experiencePythonJavaGoThreat Modeling

Full details on LinkedIn

The complete job description, requirements, and application details are available on the original posting.

About Stripe

Industry

information technology & services

Website

Visit →

Security at Stripe

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

Security Philosophy

Section 1 — Philosophy and priorities.
Secure software enablement — "Security Accelerate helps Stripe engineering teams build secure software." (Stripe job posting) Developer-first integration — "We meet developers where they work—in their IDEs, during code reviews, while writing documentation, and throughout the design process." (Stripe job posting) Automation and scalable enablement — "We build tools and processes that leverage AI, in-house tools, and off-the shelf solutions to seamlessly weave security into products for our users while maintaining Stripe's fast product velocity." (Stripe job posting) Risk-balanced decision-making — "Our broader goal is to help teams execute Stripe's strategy with an acceptable level of security risk." (Stripe job posting) Secure-by-default design — "Work closely with product engineering teams to design solutions that are secure by default." (Stripe Security Engineer posting) Threat-modeling partnership — "Lead threat modeling discussions and help teams strike the right balance between security, user experience and product advancement." (Stripe Security Engineer posting) Stated pain point — security debt is explicitly identified as an area to reduce: "Identify and help reduce security debt across our product portfolio." (Stripe Security Engineer posting).

Security Team

Section 2 — People and structure. Org model — Public postings describe a centralized Security function that collaborates with product engineering, infrastructure, acquisition, and other teams.
An embedded reporting line is not publicly specified. no leader names, titles, and LinkedIn URLs were verified. Search query used: "Stripe application security team Security Champions conference talk".
No reliable public headcount range was found.
Active AppSec job postings — At least 2 directly relevant postings were identified: Security Engineer and Software Engineer, Security Accelerate.
Exact total cannot be established from the reviewed results.
Common skills and patterns — Threat modeling.
Application and infrastructure security.
AWS plus GCP or Azure.
Docker or Kubernetes.
Secure-by-default design.
Security automation.
AI/LLM security.
Developer tooling.
IDE and code-review integration.
Security guidance, patterns, and training. (Stripe postings and).

Key Initiatives

Section 3 — Programs and workflows.
Security Champions program Found/not found — No publicly verified Security Champions program details were found in the reviewed results.
Shift-left in CI/CD Developer surfaces — Security tooling is described as operating in IDEs, code reviews, documentation, and design processes. (Stripe job posting) Vulnerability management Intake sources — Public postings reference threat modeling, security guidance, automation, and security debt, but do not specify vulnerability intake channels. (Stripe postings and) Secure SDLC ceremonies Threat modeling — Security engineers lead threat-modeling discussions with product teams. (Stripe Security Engineer posting) Design and engineering collaboration — Security teams provide automation, guidance, tooling, patterns, and training to engineering teams. (Stripe Security Engineer posting) New programs or tool rollouts in the last 6 months Secure AI and LLM usage — A 2026 posting lists developing and supporting secure AI and LLM usage or integration in products and within Security. (Stripe Security Engineer posting) Automated threat-modeling tooling — The same posting lists building or enhancing automated threat-modeling tooling. (Stripe Security Engineer posting) Security Accelerate — A late-2025 posting describes AI, internal tools, and commercial tools used to integrate security into developer workflows.
The reviewed results do not verify a rollout date or production scope. (Stripe job posting).

Preparing for an AppSec interview?

Get the weekly briefing 2,000+ security pros trust.

Interested in this role?

Apply on Stripe's site