Offensive Security Engineer

🔥 19 hours ago

🇺🇸 United States – Remote

💵 $170.4k - $255.7k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 1%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Stripe

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2010

💳 Fintech

🛍️ eCommerce

🤝 B2B

💰 Venture Round on 2021-05

Fintech • eCommerce • B2B

Stripe is a global payments processing platform that enables businesses to accept online and in-person payments. It offers a comprehensive suite of financial services, including payment processing, billing, and revenue management tools, aimed at businesses of all sizes, from startups to enterprises. By providing a developer-friendly API, Stripe allows businesses to streamline their payment operations and embed financial services directly into their applications, facilitating both B2B and B2C transactions.

📋 Description

• Conduct comprehensive penetration tests across web applications, APIs, cloud environments, mobile applications, and internal infrastructure • Plan and execute red team engagements emulating cyber and criminal threat actors targeting financial services • Perform assumed-breach and objective-based assessments to test detection and response capabilities • Partner with detection engineering, threat intelligence, and incident response teams to validate controls and improve detection fidelity • Contribute adversary tradecraft insights to detection rules, threat hunting hypotheses, and incident response playbooks • Support incident investigations with offensive expertise, log analysis, and root cause analysis • Design, develop, and maintain custom offensive tools, scripts, and automation frameworks • Build internal platforms and workflows for scalable, repeatable offensive operations • Automate testing tasks, payload generation, and reporting workflows • Produce reports communicating technical findings, business risk, and remediation guidance • Act as a subject-matter expert and point of contact for offensive security initiatives • Lead projects end-to-end, mentor junior team members, and foster continuous learning • Stay current with emerging threats, vulnerabilities, and attack techniques; share research internally and with the security community

🎯 Requirements

• 5+ years of experience in offensive security, penetration testing, red teaming, or a related field • Strong programming skills in Python, Go, or similar languages, with demonstrated experience building tools, automation, or custom exploits • Deep knowledge of web application security, including OWASP Top 10, ASVS, and common vulnerability classes • Hands-on experience with AWS, Azure, or GCP, including cloud-native attack techniques and misconfigurations • Proficiency with offensive tooling such as Burp Suite, Cobalt Strike, Mythic, Sliver, BloodHound, or similar frameworks • Familiarity with MITRE ATT&CK and adversary TTPs for initial access, privilege escalation, lateral movement, and exfiltration • Excellent written and verbal communication skills, with the ability to translate complex technical findings into clear, risk-based recommendations • Ability to think like an adversary — creative, persistent, and able to holistically assess risk in complex environments

🏖️ Benefits

• Equity participation in Stripe's growth • 401(k) plan with matching contributions from day one • Comprehensive medical, dental, and vision coverage • Wellness stipends • Annual budget for training, certifications, and conference attendance • Remote work from home within the United States • Office visits for team meetings, on-sites, and events