Client Platform Security Engineer

Stripe • New York, NY

22h

About The Position

Stripe is a financial infrastructure platform used by millions of companies. The Secure Devices team ensures that Stripe client endpoints meet security standards through services that detect and prevent data loss, restrict software execution to approved software, and securely manage device identities. The team operates on-device and backend services across multiple platforms, with a focus on protecting user data while enabling employee productivity.

As a software engineer on Secure Devices, you will work across software development, security, and client platform engineering. You will partner with Security, Infrastructure, and Corporate Engineering teams on strategic endpoint-security projects, develop infrastructure for new platforms, and operate services that secure more than 10,000 Stripe devices.

Requirements

• At least 4 years of relevant experience securing iOS and/or macOS platforms.
• At least 4 years of software engineering experience writing Go, Swift, or Objective-C.
• Deep expertise in securing devices within the Apple ecosystem.
• Understanding of the current threat landscape and how to defend Apple devices against modern threats.
• High standards for code quality and a constructive attitude toward helping others raise the bar.
• Ability to think creatively and holistically about reducing risk in a complex environment.
• Ability to drive clear next steps in ambiguous situations without clear lines of ownership.
• Empathy, strong communication skills, and respect for collaboration.

Nice To Haves

• Experience implementing endpoint detection and response software.
• Knowledge of macOS or iOS internals and how they can be used to build security controls and software.
• Exposure to data loss prevention strategies.
• Ability to develop backend networked applications capable of handling a high number of requests.
• General proficiency in securing client devices.
• Understanding of platform hardening, malware detection, and endpoint management through configuration as code.
• Understanding of networking protocols across various levels of the stack, including TCP, DNS, SSH, TLS, and HTTP.
• Linux system administration knowledge.
• Additional experience securing alternative platforms, including Windows and Android.
• Experience working with AWS cloud services.

Responsibilities

• Contribute to the secure design and implementation of Stripe’s mobile expansion initiative.
• Advise partner teams on iOS security best practices and secure-by-design architectures as an iOS security subject matter expert.
• Design, build, and maintain endpoint-security software, including telemetry and prevention capabilities implemented through macOS system extensions.
• Collaborate with partner teams to define and measure secure configurations for macOS, iOS/Android, and ChromeOS client platforms.
• Operate high-request-volume backend services that provide critical controls and security configuration to Stripe endpoints.
• Reduce the use of unapproved and untrusted software while creating a good onboarding experience for approved software.
• Manage and improve device attestation flows to protect device and user identities.
• Identify opportunities to improve client-platform security posture and resilience against malware and advanced persistent threats.
• Build and maintain a user-focused data loss prevention program to protect against accidental and malicious data exfiltration.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed