Offensive Security Engineer

Stripe
United States
Workplace: RemoteFull timeUSD 170,400 - 255,700 annuallyFunction: CybersecurityExperience: 5+ yearsSkills: ["Written communication","Verbal communication","Risk-based thinking","Ability to think like an adversary"]

Join Stripe’s Proactive Threat team to simulate real-world adversary tactics and uncover security risks across products and infrastructure. You’ll run hands-on penetration testing and red team engagements, then collaborate with defensive teams to validate detection and response capabilities. In addition, you’ll design and maintain offensive tooling and automation, leverage threat intelligence, and produce clear, risk-based reports that directly improve how Stripe secures financial infrastructure.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Stripe
Stripe
2 days ago

Offensive Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 8 hours agoStatus: Live

Job Summary

Join Stripe’s Proactive Threat team to simulate real-world adversary tactics and uncover security risks across products and infrastructure. You’ll run hands-on penetration testing and red team engagements, then collaborate with defensive teams to validate detection and response capabilities. In addition, you’ll design and maintain offensive tooling and automation, leverage threat intelligence, and produce clear, risk-based reports that directly improve how Stripe secures financial infrastructure.
Location: United States
Workplace: Remote
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Conduct comprehensive penetration tests across web applications, APIs, cloud environments, mobile applications, and internal infrastructure
  • •Plan and execute red team engagements emulating real-world cyber and criminal threat actors targeting financial services
  • •Perform assumed-breach and objective-based assessments to test detection and response capabilities with defensive teams
  • •Partner with detection engineering, threat intelligence, and incident response teams to validate controls and improve detection fidelity
  • •Design and maintain offensive tooling, scripts, and automation frameworks; produce clear, actionable reports for technical and non-technical stakeholders

Pay and Benefits

Salary: USD 170,400 - 255,700 annually
Perks:Equity401kHealth InsuranceDentalVisionWellness StipendLearning Budget

Key Requirements

  • •5+ years of experience in offensive security, penetration testing, red teaming, or a related field
  • •Strong programming skills in Python, Go, or similar languages, with experience building tools, automation, or custom exploits
  • •Deep web application security knowledge, including OWASP Top 10 and common vulnerability classes
  • •Hands-on experience with cloud platforms (AWS, Azure, or GCP), including cloud-native attack techniques and misconfigurations
  • •Proficiency with offensive tooling such as Burp Suite, Cobalt Strike, Mythic, Sliver, BloodHound, or similar frameworks
Experience:5+ yearsOffensive securityPenetration testingRed teamingFintechFinancial services
Skills:Written communicationVerbal communicationRisk-based thinkingAbility to think like an adversary
Certifications:OSCPOSWEOSEPOSEDCRTOCPTSPNPTGXPNCloud security certifications
Languages:English
Tech Stack:PythonGoAWSAzureGCPBurp SuiteCobalt StrikeMythicSliverBloodHoundMITRE ATT&CKOWASP Top 10ASVSSplunkDatabricksPySparkOsqueryClaude CodeCursorGitHub Copilot

Company Brief

Stripe
Provides payment processing APIs and financial infrastructure for internet businesses. Powers online payments for millions of companies from startups to Fortune 500s.
Industry: Payments
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Scaleup
Valuation: Decacorn (USD 10B+)
Funding: Series E+
Headquarters: San Francisco, United States
Founded: 2010
Glassdoor
Glassdoor: 4.2
WebsiteLinkedInGlassdoor