Offensive Security Engineer – Red Team & Tooling

Stripe; United States; Hybrid; USD 180,000 - 250,000; Full time

Job summary

Stripe is seeking an experienced Offensive Security Engineer to simulate adversaries, perform hands-on penetration testing, and lead red team engagements across Stripe’s product and infrastructure.

You will design and build offensive tooling, leverage threat intelligence, and collaborate with blue teams to validate detections and response capabilities. Ideal candidates will have deep cloud and web security expertise and strong communication skills.

Qualifications

• 5+ years in offensive security, pentesting, red teaming, or related field.
• Strong programming in Python, Go, or similar languages with tooling experience.
• Deep knowledge of web app security (OWASP Top 10, ASVS).
• Hands-on cloud experience (AWS/Azure/GCP) and cloud-native techniques.
• Familiarity with offensive tooling (Burp Suite, Cobalt Strike, Mythic, Sliver, BloodHound).
• Familiarity with MITRE ATT&CK and TTPs for initial access, lateral movement, exfiltration.
• Excellent written and verbal communication; ability to translate findings into risk-based recommendations.
• Adversary mindset with holistic risk assessment in complex environments.

Responsibilities

• Conduct comprehensive penetration tests across web apps, APIs, cloud infrastructure, and mobile apps.
• Lead red team engagements simulating cyber adversaries and validate detections.
• Build offensive tooling and automation to improve coverage and efficiency.
• Collaborate with defense, threat intel, and IR to improve controls and detections.
• Develop and maintain internal offensive security platforms and workflows.
• Produce clear reports communicating findings and remediation guidance to stakeholders.
• Lead projects end-to-end and mentor junior engineers.

Skills

Python

Go

Web security

Cloud platforms

Threat modeling

MITRE ATT&CK

Communication skills

Adversary emulation

Tools

Burp Suite

Cobalt Strike

Mythic

Sliver

BloodHound

Job description

Stripe is seeking an experienced Offensive Security Engineer to simulate adversaries, perform hands-on penetration testing, and lead red team engagements across Stripe’s product and infrastructure.

You will design and build offensive tooling, leverage threat intelligence, and collaborate with blue teams to validate detections and response capabilities. Ideal candidates will have deep cloud and web security expertise and strong communication skills.