AppSec Jobs

Stripe

Security Engineer, Bridge

LuxembourgWebsite
Apply on Stripe's site →

At a Glance

8+ years experienceRubyCI/CDThreat ModelingIncident Response

About This Role

Who we are

About Stripe

Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world's largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career.

About the team

We're creating an entirely new payments platform, built with stablecoins, to simplify global money movement. Bridge enables faster, cheaper payments and borderless access to dollars via stablecoins. Through our APIs, businesses can send and receive funds across borders faster and cheaper vs. SWIFT and other fiat-only rails. Our virtual accounts enable international consumers and businesses to easily access, store, and spend US dollars. Our payouts infrastructure enables platforms to disburse USD to anyone globally. We believe many trillions of dollars will move and settle through stablecoin payment rails. Bridge is pulling this future forward.

We have a small team of people who have previously built financial infrastructure at some of the world's leading companies (Coinbase, Stripe, Square, Brex, Upstart, DoorDash, Airbnb), and each and every one of them chose Bridge because they fundamentally believe that stablecoins will be a critical piece of financial infrastructure that allows for the improvement of global money movement.

What you'll do

We're hiring a Security Engineer to build and scale the Bridge security foundation. This is a rare opportunity to design a security program from the ground up, while also leveraging the infrastructure, best practices, and tooling of one of the most mature security organizations in the industry.

Responsibilities

  • Design and implement the Bridge security roadmap from first principles to production.
  • Identify and tackle the most important Bridge security risks quickly and pragmatically.
  • Integrate with Stripe infrastructure where it makes sense, and find custom solutions where it doesn't.
  • Lead threat modeling and hardening efforts for the Bridge money movement systems in collaboration with crypto and infra teams.
  • Build key security capabilities, including monitoring, secrets management, incident response, access controls, and CI/CD hardening.
  • Reinforce engineering best practices around secure development and infrastructure.
  • Ensure Bridge meets compliance and audit expectations as we scale to more regulated markets.
  • Collaborate cross-functionally with engineering, product, and the Stripe security organization to move fast without compromising safety.

Who you are

Minimum requirements

  • 8+ years of experience in Security engineering.
  • Experience building or scaling security programs at a startup or in an embedded role.

Preferred qualifications

  • Experience in fast-paced startup environments, building security practices from the ground up.
  • Startup mindset—scrappy, pragmatic, and quick to solve the most critical problems.
  • Comfort writing and debugging backend application code, with Ruby experience preferred.
  • Comfort with ambiguity and ability to ruthlessly prioritize.
  • Ability to balance security rigor with speed, especially in fast-moving environments.
  • Clear communication across technical and non-technical stakeholders.
  • Interest in the potential of crypto and stablecoins to power global financial infrastructure.

Source: Stripe careers · View original posting


About Stripe

Stripe, Inc. is a financial infrastructure platform founded in 2010 by brothers John and Patrick Collison. Headquartered in San Francisco, California, with additional offices in Dublin, London, Paris, Singapore, and Tokyo, Stripe specializes in online payment processing and related services for businesses globally. The company simplifies online transactions through developer-friendly APIs, making it easier for businesses to integrate payment solutions. Stripe's core offerings include payment processing, fraud detection with Stripe Radar, business formation through Stripe Atlas, and merchant cash advances via Stripe Capital. The platform also automates sales tax calculations with Stripe Tax and provides no-code checkout options through Payment Links. Stripe has expanded its services to support various markets and has made significant strides in areas like Bitcoin support and carbon removal initiatives with Stripe Climate. The company has gained a strong reputation among developers and businesses of all sizes, contributing to its substantial growth and high valuation.

Industry

information technology & services

Employees

8,000

3467 engineers

Revenue

$5.1B

Website

Visit →

Security at Stripe

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

Security Philosophy

  • Section 1 — Philosophy and priorities.
  • Secure software enablement — "Security Accelerate helps Stripe engineering teams build secure software." (Stripe job posting) Developer-first integration — "We meet developers where they work—in their IDEs, during code reviews, while writing documentation, and throughout the design process." (Stripe job posting) Automation and scalable enablement — "We build tools and processes that leverage AI, in-house tools, and off-the shelf solutions to seamlessly weave security into products for our users while maintaining Stripe's fast product velocity." (Stripe job posting) Risk-balanced decision-making — "Our broader goal is to help teams execute Stripe's strategy with an acceptable level of security risk." (Stripe job posting) Secure-by-default design — "Work closely with product engineering teams to design solutions that are secure by default." (Stripe Security Engineer posting) Threat-modeling partnership — "Lead threat modeling discussions and help teams strike the right balance between security, user experience and product advancement." (Stripe Security Engineer posting) Stated pain point — security debt is explicitly identified as an area to reduce: "Identify and help reduce security debt across our product portfolio." (Stripe Security Engineer posting).

Security Team

  • Section 2 — People and structure. Org model — Public postings describe a centralized Security function that collaborates with product engineering, infrastructure, acquisition, and other teams.
  • An embedded reporting line is not publicly specified. no leader names, titles, and LinkedIn URLs were verified. Search query used: "Stripe application security team Security Champions conference talk".
  • No reliable public headcount range was found.
  • Active AppSec job postings — At least 2 directly relevant postings were identified: Security Engineer and Software Engineer, Security Accelerate.
  • Exact total cannot be established from the reviewed results.
  • Common skills and patterns — Threat modeling.
  • Application and infrastructure security.
  • AWS plus GCP or Azure.
  • Docker or Kubernetes.
  • Secure-by-default design.
  • Security automation.
  • AI/LLM security.
  • Developer tooling.
  • IDE and code-review integration.
  • Security guidance, patterns, and training. (Stripe postings and).

Key Initiatives

  • Section 3 — Programs and workflows.
  • Security Champions program Found/not found — No publicly verified Security Champions program details were found in the reviewed results.
  • Shift-left in CI/CD Developer surfaces — Security tooling is described as operating in IDEs, code reviews, documentation, and design processes. (Stripe job posting) Vulnerability management Intake sources — Public postings reference threat modeling, security guidance, automation, and security debt, but do not specify vulnerability intake channels. (Stripe postings and) Secure SDLC ceremonies Threat modeling — Security engineers lead threat-modeling discussions with product teams. (Stripe Security Engineer posting) Design and engineering collaboration — Security teams provide automation, guidance, tooling, patterns, and training to engineering teams. (Stripe Security Engineer posting) New programs or tool rollouts in the last 6 months Secure AI and LLM usage — A 2026 posting lists developing and supporting secure AI and LLM usage or integration in products and within Security. (Stripe Security Engineer posting) Automated threat-modeling tooling — The same posting lists building or enhancing automated threat-modeling tooling. (Stripe Security Engineer posting) Security Accelerate — A late-2025 posting describes AI, internal tools, and commercial tools used to integrate security into developer workflows.
  • The reviewed results do not verify a rollout date or production scope. (Stripe job posting).

Preparing for an AppSec interview?

Get the weekly briefing 2,000+ security pros trust.

Interested in this role?

Apply on Stripe's site