Cloud Security Engineer

Job Overview

As a Cloud Security Engineer at Stripe, you will design and develop frameworks, systems, and solutions to ensure the security of Stripe's engineering infrastructure and protect user data.

Responsibilities

• Design, build, and operate core security infrastructure used by all of Stripe's engineering teams.
• Collaborate with stakeholders and users to uphold high engineering standards.
• Contribute to team learning by improving engineering standards, tooling, and processes.
• Develop durable solutions that advance Stripe's security beyond the current state.
• Expand Stripe's cloud footprint on top of secure, paved roads and guardrails.
• Optimize security controls for delightful user experiences.
• Partner with infrastructure and engineering teams to integrate with cloud infrastructure.
• Make impactful decisions about systems and security.
• Use data to determine security baselines.
• Define infrastructure that feeds signals to threat teams.
• Evaluate and prototype new security tools and practices.

Projects

• Design and implement controls supporting security invariants and enforcing security principles.
• Provide migration paths for newly acquired companies onto the Stripe Secure Platform.
• Develop CI tooling for platform-related configuration.
• Implement guardrails and security controls for cloud technologies.
• Expand cloud identity infrastructure for AI and agentic access.
• Automate tooling for driving down permissions and access across cloud services.

Requirements

• Empathy and strong communication skills.
• Learning mindset.
• Ability to drive clear next steps in ambiguous situations.
• High standards for code quality.
• Software engineering experience in high-stakes production environments.
• Experience with security on AWS, Azure, or GCP.
• Ability to consider system failures and fixes.
• Creative and holistic thinking about reducing risk.

Preferred Qualifications

• Experience with threat modeling in cloud-native environments.
• Experience with Linux systems, Kubernetes, and container-based platforms.
• Prior usage of security monitoring tools.
• Experience in multi-cloud or complex cloud environments.