Security Incident Response Engineer - Remote/Hybrid

Stripe; Seattle (WA); Hybrid; USD 144,000 - 217,000; Full time

Benefits offered by this job

Equity

Bonus program

401(k) plan

Medical, dental, and vision benefits

Wellness stipend

Job summary

Stripe is seeking a Security Incident Response engineer to strengthen incident detection and response capabilities. You will work on UEBA-focused analytics, endpoint hardening, and scalable signal enrichment to differentiate legitimate from malicious activity.

You will collaborate with security engineering and data science teams, build Stripe-specific detection solutions, and drive postmortem and preventive measures across the organization.

Qualifications

• 3+ years analyzing large data sets for security problems or building behavioral security models.
• Bachelor's or Master's in CS or related field, or equivalent experience.
• Expert knowledge of Python and SQL; familiarity with other programming languages.
• Experience with log analysis, network security, forensics, and incident response investigations.
• Proficiency with developing novel analytical methods to build, automate, and improve detection and response systems.
• Ability to communicate results clearly and focus on impact.
• Ability to think creatively and holistically about reducing risk in a complex environment.

Responsibilities

• Analyze and investigate a broad range of threats on client devices.
• Develop requirements for detection models and enhancements to existing systems.
• Collect, transform, and ingest raw data from disparate sources into threat detection pipelines.
• Streamline incident response capabilities, ensuring the tooling and processes are clear.
• Work cross‑functionally with security engineering and data science teams to build solutions for analyzing security events data at scale and protecting Stripe networks, systems, and data from threats.
• Provide actionable insights to help identify, prevent, detect, and respond to anomalous or potentially malicious user and entity activity.
• Act as the subject‑matter expert and primary contact for stakeholder teams invested in Security Analytics and Detection programs as well as Stripe‑wide security initiatives.
• Collaborate effectively with teammates, leading projects, mentoring others, and developing and championing quality standards within the team.

Skills

Python

SQL

Log analysis

Incident response

Data analysis

Communication

Education

Bachelor's or Master's in CS or related field

Tools

Databricks

Jupyter

Trino

PySpark

Pandas

Sci-kit Learn

osquery

Splunk/LogScale

Job description

Stripe is seeking a Security Incident Response engineer to strengthen incident detection and response capabilities. You will work on UEBA-focused analytics, endpoint hardening, and scalable signal enrichment to differentiate legitimate from malicious activity.

You will collaborate with security engineering and data science teams, build Stripe-specific detection solutions, and drive postmortem and preventive measures across the organization.