Software Engineer, Vulnerability Management

About Stripe

Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities.

About the Team

The Vulnerability Management team's mission is to "Surface vulnerabilities at scale across Stripe." Our vision is to create a culture of continuous excellence in managing vulnerabilities, enhance customer trust by giving context about threats and vulnerabilities affecting Stripe's systems, and serve as a key partner in Stripe's risk management.

What You’ll Do

As a Software Engineer focused on Vulnerability Management, you will use your software engineering expertise to find and prioritize vulnerabilities across Stripe's systems and drive their timely remediation.

Responsibilities

• Build data- and agent-backed systems to surface vulnerabilities across Stripe
• Identify vulnerabilities using automated tools and triage them appropriately
• Coordinate fixes and collaborate with other teams to drive remediation of vulnerabilities
• Continuously improve Stripe's security posture, processes, and scanning tools
• Contribute to Stripe's overall security and risk management strategy
• Serve as an advisor on security risks and collaborate cross-functionally

Qualifications

Minimum Requirements

• 2+ years of industry software engineering experience (excluding internships or co-ops)
• Software engineering experience within the security domain
• Empathy, strong communication skills, and a deep respect for collaboration
• Excellent problem-solving skills and attention to detail
• High standards for code quality and a constructive attitude to help others raise the bar

Preferred Qualifications

• Ability to think creatively and holistically about reducing risk in a complex environment
• Familiarity with automated vulnerability identification tools and triage
• Track record of delivering projects using agents to automate human review processes