Security Incident Response Engineer

About Stripe

Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead.

About the Team

The Security Incident Response team works to analyze, investigate, and respond to threats before they impact Stripe’s business or users. From external attacks to insider threats, our goal is to respond with speed and precision, remediate, and support the incident postmortem process. The team is distributed across multiple AMER time zones and regularly coordinates with stakeholders in EMEA and APAC.

Responsibilities

• Analyze and investigate a broad range of threats or activities occurring on client devices
• Develop requirements for detection models and enhancements to existing systems
• Collect, transform, and ingest raw data from disparate sources into threat detection pipelines
• Streamline incident response capabilities, ensuring the tooling and processes are clear
• Work cross‑functionally with security engineering and data science teams to build solutions for analyzing security events data at scale and protecting Stripe networks, systems, and data from threats
• Provide actionable insights to help identify, prevent, detect, and respond to anomalous or potentially malicious user and entity activity
• Act as the subject‑matter expert and primary contact for stakeholder teams invested in Security Analytics and Detection programs as well as Stripe‑wide security initiatives
• Collaborate effectively with teammates, leading projects, mentoring others, and developing and championing quality standards within the team

Minimum Requirements

• 3+ years experience analyzing large data sets to solve problems and/or building models with a behavioral approach to security
• B.S. or M.S. Computer Science or related field, or equivalent experience
• Expert knowledge of Python and SQL, and familiarity with other programming languages
• Existing experience with log analysis (e.g., first or third‑party applications, system/data access, event logs), network security, digital forensics, and incident response investigations
• Proficiency with developing and using novel analytical methods to build, automate, and improve detection and response systems
• Ability to communicate results clearly and focus on impact
• Ability to think creatively and holistically about reducing risk in a complex environment

Preferred Qualifications

• An adversarial mindset, understanding the goals, behaviors, and TTPs of threat actors
• Experience with software engineering, data processing and analysis tools (e.g., Databricks/Jupyter, Trino, etc.)
• Familiarity with common open‑source frameworks for big data processing and/or data science (PySpark, Pandas, Scikit‑Learn, etc.)
• Experience with tactical threat intelligence and/or hunting for sophisticated threat actors in an enterprise environment
• Familiarity with network observability, security software, or data engineering solutions (osquery, Splunk/LogScale, etc.)
• Experience in one or more of the following areas: user and entity behavior analytics (UEBA), security information event management (SIEM), security orchestration automation and response (SOAR), or data loss prevention (DLP)

Work Location

This role is available either in an office or a remote location (35+ miles or 56+ km from a Stripe office). In‑office expectations: Stripe employees spend at least 50 % of the time in a given month in their local office or with users, balancing in‑person collaboration with flexibility. Remote locations are defined as being 35 miles (56 km) or more from an office; remote employees are expected to work primarily from home, with occasional visits for meetings and events. Stripe does not cover relocation costs.

Pay and Benefits

The annual US base salary range for this role is $144,300 – $216,500. The range may be inclusive of several career levels and will be narrowed during the interview process based on experience, qualifications, and location. Applicants outside the US may request the salary range for their location.

Additional benefits may include equity, company bonus or sales commissions/bonuses; 401(k) plan; medical, dental, and vision benefits; and wellness stipends.