Software Engineer, Vulnerability Management

Stripe

1d

About The Position

Stripe is a financial infrastructure platform whose mission is to increase the GDP of the internet. The Software Engineer will join Stripe’s Vulnerability Management team, whose mission is to surface vulnerabilities at scale across Stripe. The team aims to foster continuous excellence in vulnerability management, give users context about threats and vulnerabilities affecting Stripe’s systems, and provide visibility into vulnerabilities across Stripe’s products and services as a partner in risk management.

The role builds systems that identify and prioritize vulnerabilities across Stripe’s codebases, production infrastructure, and employee laptops. These systems collect software bills of materials (SBOMs) across tens of millions of lines of code, scan hundreds of thousands of hosts for package and kernel versions, and connect inventory to known vulnerabilities (CVEs). The engineer will also build agentic systems to investigate emerging threats, such as parsing security news, identifying relevant technologies, and assessing whether Stripe is affected.

The role combines building data pipelines and security automation with hands-on vulnerability analysis and security guidance for partner teams. The engineer will help teams understand exposure, prioritize fixes, and drive remediation. Work spans Go, Java, Ruby, and Python, with most hands-on work in Go because the team’s services are written in Go. The typical balance is about 70% coding and 30% security analysis or guidance to partner teams.

Requirements

• At least 5 years of industry software engineering experience, excluding internships and co-ops.
• Significant software engineering experience within the security domain.
• Empathy, strong communication skills, and a deep respect for collaboration.
• Excellent problem-solving skills and attention to detail.
• High standards for code quality and a constructive attitude toward helping others raise the bar.
• Experience mentoring early-career engineers in security and software engineering craft.

Nice To Haves

• Ability to think creatively and holistically about reducing risk in a complex environment.
• Familiarity with automated vulnerability identification tools and triage.
• Successful project delivery using agents to automate human review processes.

Responsibilities

• Identify vulnerabilities using automated tools and triage them appropriately.
• Collaborate with other teams to drive remediation of vulnerabilities.
• Contribute to Stripe’s overall security and risk management strategy.
• Continuously improve security posture, processes, and tools.
• Build systems that identify and prioritize vulnerabilities across codebases, production infrastructure, and employee laptops.
• Build agentic systems to investigate emerging threats and assess whether Stripe is affected.
• Help teams across Stripe understand their exposure, prioritize fixes, and drive remediation.
• Provide security guidance to partner teams.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed