Impact-Driven Security Incident Response Engineer

Stripe; San Francisco (CA); Hybrid; USD 144,000 - 217,000; Full time

Benefits offered by this job

Equity

Bonus program

401(k)

Medical/dental/vision

Wellness stipend

Job summary

Stripe is seeking a Security Incident Response Engineer to enhance incident response capabilities, focusing on UEBA and endpoint hardening. You will build Stripe‑specific signals, work with data science teams, and guide threat detection that scales across the company.

You will translate telemetry into actionable detections, investigate incidents, and help reduce uncertainty by identifying root causes and preventative measures.

Qualifications

• 3+ years experience analyzing large data sets to solve problems and/or building models with a behavioral approach to security

Responsibilities

• Analyze and investigate a broad range of threats or activities occurring on client devices
• Develop requirements for detection models and enhancements to existing systems
• Collect, transform, and ingest raw data from disparate sources into threat detection pipelines
• Streamline incident response capabilities, ensuring the tooling and processes are clear
• Work cross‑functionally with security engineering and data science teams to build solutions for analyzing security events data at scale and protecting Stripe networks, systems, and data from threats
• Provide actionable insights to help identify, prevent, detect, and respond to anomalous or potentially malicious user and entity activity
• Act as the subject‑matter expert and primary contact for stakeholder teams invested in Security Analytics and Detection programs as well as Stripe‑wide security initiatives
• Collaborate effectively with teammates, leading projects, mentoring others, and developing and championing quality standards within the team

Skills

Python

SQL

log analysis

UEBA

threat intelligence

incident response

data analysis

communication

Education

B.S./M.S. in CS or related field

Tools

Databricks/Jupyter

Trino

osquery

Splunk/LogScale

Job description

Stripe is seeking a Security Incident Response Engineer to enhance incident response capabilities, focusing on UEBA and endpoint hardening. You will build Stripe‑specific signals, work with data science teams, and guide threat detection that scales across the company.

You will translate telemetry into actionable detections, investigate incidents, and help reduce uncertainty by identifying root causes and preventative measures.