Security Engineer, Privy

Stripe • New York, NY

4d

About The Position

As a Security Engineer at Privy, you will help secure a rapidly growing platform through hands-on investigation, operational ownership, and building production code to solve security problems. The role spans security operations, incident response, application and infrastructure security, and internal tooling. You will own day-to-day work that protects Privy, including investigating anomalies, improving security workflows, and building automation to make the team more effective over time. You will work with engineers across Privy and specialists in cryptography, application security, offensive security, and infrastructure security to turn security expertise into practical, durable outcomes.

Requirements

• Experience as a security engineer, detection engineer, or similarly hands-on engineer in a technically demanding environment.
• Strong software-engineering skills in Python, Go, Ruby, or a similar language, including the ability to build maintainable tooling and contribute directly to production fixes.
• Experience investigating security signals, incidents, vulnerabilities, suspicious activity, or other ambiguous technical problems through to resolution.
• Familiarity with security operations, incident response, vulnerability management, detection engineering, access reviews, or related operational-security workflows.
• Strong understanding of web, browser, infrastructure, or cloud security, with the ability to apply it across a broad range of problems.
• Good judgment under pressure, a methodical investigative approach, and comfort working independently with incomplete information.
• Strong communication and collaboration skills, including explaining technical findings, risks, and recommended actions clearly to clients and internal stakeholders.
• A self-directed approach: notices gaps, makes progress through ambiguity, and reliably closes the loop.

Nice To Haves

• Experience with AWS, GCP, or other cloud-security environments.
• Experience with detection engineering, security automation, incident-response tooling, or remediation pipelines.
• Bug-bounty experience, offensive-security exposure, or a strong attacker-minded approach to investigation.
• Experience with IAM, secrets management, secure production access, or secure CI/CD.
• Background in application security, infrastructure security, cryptography, or privacy engineering.
• Experience with fintech, payments, blockchain, or another diligence-forward financial product domain.
• Experience helping shape security operations, incident-response practices, vulnerability-management workflows, or a bug-bounty program.

Responsibilities

• Own security engineering work end to end by investigating alerts, findings, anomalies, and security requests; identifying root causes; driving remediation; and documenting outcomes.
• Participate in Privy's security on-call rotation, responding to incidents, triaging alerts, supporting vulnerability workflows, completing access reviews, and handling security escalations.
• Build and maintain production-quality tooling to reduce manual work, including alert enrichment, automated triage and routing, remediation workflows, access-review automation, and detection improvements.
• Lead focused investigations into suspected security events or compromises, gathering evidence methodically and coordinating the appropriate response.
• Identify recurring operational toil and engineer durable solutions that improve the team's speed, consistency, and ability to scale.
• Partner with product and engineering teams to assess security risks, review lower-complexity designs and implementation plans, and make practical security tradeoffs.
• Contribute across Privy's application, infrastructure, cloud, and product-security areas, developing broad context and deeper expertise over time.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed