Offensive Security Engineer

Stripe is seeking an Offensive Security Engineer for the Proactive Threat team. The role involves conducting penetration testing, red team engagements, building offensive tooling and automation, and collaborating with defensive teams to improve security posture. The team operates across US time zones and works with global stakeholders. The engineer will simulate adversary TTPs, produce reports, and mentor junior team members.

Minimum 5+ years offensive security experience, strong programming in Python/Go, deep web app security knowledge (OWASP Top 10, ASVS), cloud platform experience (AWS, GCP, Azure), proficiency with offensive tools (Burp Suite, Cobalt Strike, etc.), familiarity with MITRE ATT&CK, excellent communication, and adversarial mindset. Preferred: fintech experience, vulnerability research, purple team ops, AI/LLM tools, open-source contributions, certifications like OSCP.