About the Job
The Security organization is dedicated to building and maintaining a secure financial infrastructure platform. By joining this team, you will be on the front lines, engineering solutions that protect the sensitive data and systems underpinning a huge portion of the world's economy. You will contribute to core securi...
As a Security Engineer New Grad you will have the opportunity to work across various security disciplines and own projects from start to finish. Your work will focus on securing Stripe's complex environment by applying software engineering principles to security challenges.
You will learn and apply the principles of secure-by-default design by working closely with product and infrastructure engineering teams.
Key Responsibilities
Work on cross-functional projects, directly collaborating with other engineers
Give meaningful feedback on code reviews and technical designs
Contribute to our overall security posture by continuously improving security processes, tooling, and defenses.
Develop a deep understanding of Stripe’s security primitives, frameworks, and invariants.
Provide actionable insights to help identify, prevent, detect, and respond to anomalous or potentially malicious activity.
Who you are:
We’re looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement.
Minimum requirements
Currently enrolled in a Bachelor’s or Master’s program in Computer Science or related field (graduating by Summer 2026)
Some experience and familiarity with programming, either through side projects or classwork. We work mostly in Java, Ruby, Python, JavaScript, Scala, and Go. We believe new programming languages can be learned if the fundamentals and general knowledge are present
Experience from either previous internships or working collaboratively on multi-person coding projects (in a university or professional setting)
Ability to learn unfamiliar systems and form an understanding of those systems, through independent research and working with a mentor and subject matter experts
Aptitude to think like an attacker and reason through different approaches to reducing security risk.
Required Skills & Abilities
Experience in code review practices, and an understanding of how to safely update production systems
Familiarity with navigating and managing work in large code bases
Prior experience or course work in cyber security, digital forensics, or incident response (e.g., through log analysis or capture-the-flag events).
Familiarity with foundational security concepts such as the OWASP Top 10 web application vulnerabilities.
Basic knowledge of SQL or experience analyzing medium to large data sets.
Exposure to cloud computing platforms such as AWS, Azure, or Google Cloud Platform.
An adversarial mindset, understanding the goals, behaviors, and TTPs (tactics, techniques, and procedures) of threat actors.
