Remote Offensive Security Engineer

Stripe; United States; Remote; USD 170,000 - 256,000; Full time

Benefits offered by this job

Equity participation in Stripe's рост

401(k) plan with matching

Comprehensive medical, dental, and vis

Wellness stipends

Training & conference budget

Job summary

Stripe is seeking an Offensive Security Engineer for the Proactive Threat team to simulate adversaries and uncover security risks across Stripe’s products and infrastructure. You will perform hands-on penetration testing, lead red team engagements, and work with blue teams to validate detection and response capabilities.

You will design, build, and maintain custom offensive tooling and automation, prioritize testing with threat intel, and contribute to incident investigations when needed.

Qualifications

• 5+ years in offensive security, pentesting, red teaming, or related field.
• Strong programming in Python, Go, or similar, with tooling experience.
• Deep knowledge of web app security (OWASP Top 10, ASVS) and common vulnerabilities.
• Hands-on cloud experience (AWS/Azure/GCP) and cloud-native attack techniques.
• Proficient with offensive tooling (Burp Suite, Cobalt Strike, Mythic, Sliver, BloodHound).
• Familiarity with ATT&CK framework and TTPs for initial access, lateral movement, and exfiltration.
• Excellent communication to translate findings into risk-informed recommendations.

Responsibilities

• Conduct comprehensive penetration tests across web apps, APIs, cloud environments, mobile apps, and internal infra.
• Lead red team engagements emulating real threat actors.
• Collaborate with blue teams to validate detection and response capabilities.
• Design and build offensive tooling and automation to scale assessments.
• Produce clear reports communicating findings, risk, and remediation guidance.

Skills

Python

Go

Offensive security

Penetration testing

Red teaming

Cloud security

Threat modeling

MITRE ATT&CK

Tools

Burp Suite

Cobalt Strike

Mythic

Sliver

BloodHound

Job description

Stripe is seeking an Offensive Security Engineer for the Proactive Threat team to simulate adversaries and uncover security risks across Stripe’s products and infrastructure. You will perform hands-on penetration testing, lead red team engagements, and work with blue teams to validate detection and response capabilities.

You will design, build, and maintain custom offensive tooling and automation, prioritize testing with threat intel, and contribute to incident investigations when needed.