Cloud Security Engineer

About the Role

The security of Stripe's engineering infrastructure is paramount, given the sensitive financial and personal data that the company handles. As such, the Cloud Security team plays a critical role in ensuring that the company's systems and data are protected from potential threats. This is a challenging but rewarding role that will appeal to individuals who are passionate about cloud security, collaboration, and innovation.

Stripe is committed to increasing the GDP of the internet, and its mission is to provide a financial infrastructure platform that enables businesses to grow and thrive. The company's security team is essential to achieving this mission, and the Cloud Security Engineer role is a key part of this effort.

What You Will Do

• Design, build, and operate the core security infrastructure used by all of Stripe's engineering teams
• Uphold high engineering standards and bring consistency to the many codebases and processes you will encounter
• Contribute to team learning by improving engineering standards, tooling, and processes
• Design and build durable solutions that will advance Stripe's security beyond the state of the art
• Help expand Stripe's cloud footprint on top of secure, paved roads and guardrails
• Optimize for security controls that have delightful user experiences
• Partner closely with infrastructure and engineering teams building integrations with our cloud infrastructure or adopting new cloud managed services
• Make impactful decisions about systems and security — their edge cases, failure modes, and life cycles
• Use data to determine appropriate baselines against which to measure security
• Define infrastructure that reliably feeds signals to threat teams
• Evaluate and prototype new security tools and practices

What We Are Looking For

• Empathy, strong communication skills, and a deep respect for the power of collaboration
• A learning mindset, regardless of level or experience
• The ability to drive clear next steps when encountering ambiguous spaces without clear lines of ownership
• High standards for code quality and a passion for security
• Experience with cloud security, preferably in a fast-paced and dynamic environment
• Strong understanding of security principles, including security invariants and threat modeling
• Ability to design and implement controls that support security invariants and enforce security principles
• Experience with CI tooling for platform-related configuration, including IAM roles, SCPs, and associated components
• Knowledge of guardrails and security controls for both commonly used and newer cloud technologies

Nice to Have

• Experience with automation tooling for continually driving down permissions and access across cloud services
• Knowledge of cloud identity infrastructure and the ability to provide paved paths for AI and agentic access
• Experience with evaluating and prototyping new security tools and practices
• Familiarity with Stripe's products and services
• Experience working in a remote or distributed team environment

Benefits and Perks

• Competitive salary and equity package
• Comprehensive health, dental, and vision insurance
• Flexible PTO and parental leave policies
• Remote work stipend and home office setup support
• Professional development opportunities and conference sponsorships
• Access to cutting-edge technologies and tools
• Collaborative and dynamic work environment
• Opportunity to work with a talented and dedicated team
• Mission-driven company with a strong sense of purpose and values

• When applying for this role, be sure to highlight your experience with cloud security and your ability to design and implement controls that support security invariants and enforce security principles.
• Showcase your passion for security and your ability to drive clear next steps when encountering ambiguous spaces without clear lines of ownership.
• Be prepared to discuss your experience with CI tooling for platform-related configuration, including IAM roles, SCPs, and associated components.
• Demonstrate your knowledge of guardrails and security controls for both commonly used and newer cloud technologies.
• Show your ability to evaluate and prototype new security tools and practices, and be prepared to discuss your experience with automation tooling for continually driving down permissions and access across cloud services.
• Prepare examples of how you have contributed to team learning by improving engineering standards, tooling, and processes, and be ready to discuss how you would make impactful decisions about systems and security in this role.