Offensive Security Engineer

An engineer on Stripe's Proactive Threat team, a combined penetration testing and red team function that hunts for weaknesses in Stripe's applications, networks and cloud before attackers do. The engineer tests web apps, APIs, mobile apps, cloud estates and internal systems, plans red team operations that mimic criminal and state actors targeting financial services, runs assumed-breach exercises with the defensive teams, and feeds attacker insight into detections, hunts and response playbooks. Building offensive tools and automation is as central as testing, along with clear reporting, leading projects and mentoring.

Stripe asks for five or more years in offensive security, strong Python or Go, deep web and cloud attack knowledge, and familiarity with tools such as Burp, Cobalt Strike, Sliver and BloodHound. Remote across the US.