Stripe
Offensive Security Engineer
$170K–$256K
US - Remote +1 · Remote · Full-time · Posted Sep 25, 2026
- Location
- US - Remote
US - Experience
- 5+ years; offensive security, penetration testing, red teaming, or a related field.
About the job
Conducts penetration tests and red-team operations across Stripe’s products and infrastructure, builds offensive security tools, and works with defensive teams to strengthen detection and response.
What you'll do
- Test applications, APIs, cloud environments, mobile apps, and internal infrastructure; execute red-team and assumed-breach assessments.
- Build offensive tools, automation, platforms, and workflows; produce reports with findings and remediation guidance.
- Collaborate with detection, threat intelligence, and incident response teams to validate controls and support investigations.
What they ask for
- 5+ years of experience in offensive security, penetration testing, red teaming, or a related field.
- Strong programming skills in Python, Go, or similar languages, with experience building tools, automation, or custom exploits.
- Deep knowledge of web application security and hands-on experience with AWS, Azure, or GCP.
- Proficiency with offensive tooling and familiarity with adversary tradecraft and frameworks such as MITRE ATT&CK.
Nice to have
- Offensive security experience in fintech, financial services, or other highly regulated environments.
- Experience with AI/LLM-assisted development tools, agentic automation, or testing AI/ML and LLM-based applications.
Pay
$170,400 – $255,700 USD (base salary)
Tools
Python, Go, AWS, GCP, Azure, Burp Suite, Cobalt Strike, MITRE ATT&CK
AI focus
Preferred experience includes using AI/LLM-assisted tools and agentic automation in offensive security workflows, and testing AI/ML or LLM-based applications for security weaknesses.
Model-written summary · the original posting is authoritative