Cloud Security Engineer

Responsibilities

• Design, build, and operate core security infrastructure used by all Stripe engineering teams.
• Uphold high engineering standards and bring consistency to codebases and processes.
• Contribute to team learning by improving engineering standards, tooling, and processes.
• Design and build durable solutions advancing Stripe's security.
• Help expand Stripe's cloud footprint with secure guardrails.
• Optimize security controls for delightful user experiences.
• Partner with infrastructure and engineering teams on cloud integrations.
• Make impactful decisions about systems, security edge cases, failure modes, and lifecycles.
• Use data to determine security baselines.
• Define infrastructure feeding signals to threat teams.
• Evaluate and prototype new security tools and practices.

You may work on:

• Designing/implementing controls supporting security invariants with great UX.
• Providing migration paths for acquired companies onto Stripe Secure Platform.
• CI tooling for IAM roles, SCPs, and components.
• Guardrails for cloud technologies.
• Expanding cloud identity for AI/agentic access.
• Automation for reducing permissions.

Minimum Requirements

• Empathy, strong communication, respect for collaboration.
• Learning mindset.
• Drive clear next steps in ambiguous spaces.
• High standards for code quality.
• Software engineering experience in high-stakes production.
• Knack for system failure analysis.
• Creative/holistic risk reduction.
• Experience with security on AWS, Azure, or GCP.

Preferred Qualifications

• Threat modeling in cloud native environments.
• Linux, Kubernetes, container platforms.
• Security monitoring tools (CSPM, CNAAP).
• Multi-cloud or complex cloud environments.