Security Engineer, New Grad

Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world’s largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead.

As a Security Engineer New Grad you will have the opportunity to work across various security disciplines and own projects from start to finish. Your work will focus on securing Stripe's complex environment by applying software engineering principles to security challenges.

Responsibilities:

• Work on cross-functional projects, directly collaborating with other engineers
• Give meaningful feedback on code reviews and technical designs
• Contribute to our overall security posture by continuously improving security processes, tooling, and defenses.
• Develop a deep understanding of Stripe’s security primitives, frameworks, and invariants.
• Provide actionable insights to help identify, prevent, detect, and respond to anomalous or potentially malicious activity.

Requirements:

• Currently enrolled in a Bachelor’s or Master’s program in Computer Science or related field (graduating by Summer 2026)
• Some experience and familiarity with programming, either through side projects or classwork. We work mostly in Java, Ruby, Python, JavaScript, Scala, and Go.
• Experience from either previous internships or working collaboratively on multi-person coding projects (in a university or professional setting)
• Ability to learn unfamiliar systems and form an understanding of those systems, through independent research and working with a mentor and subject matter experts
• Aptitude to think like an attacker and reason through different approaches to reducing security risk.

Preferred qualifications:

• Experience in code review practices, and an understanding of how to safely update production systems
• Familiarity with navigating and managing work in large code bases
• Prior experience or course work in cyber security, digital forensics, or incident response (e.g., through log analysis or capture-the-flag events).
• Familiarity with foundational security concepts such as the OWASP Top 10 web application vulnerabilities.
• Basic knowledge of SQL or experience analyzing medium to large data sets.
• Exposure to cloud computing platforms such as AWS, Azure, or Google Cloud Platform.
• An adversarial mindset, understanding the goals, behaviors, and TTPs (tactics, techniques, and procedures) of threat actors.