软件工程师，漏洞管理
Software Engineer, Vulnerability Management
我们是谁
关于 Stripe
Stripe 是一家面向企业的金融基础设施平台。数以百万计的公司——从全球最大的企业到最具雄心的初创公司——使用 Stripe 来接受支付、增长收入并加速新的商业机会。我们的使命是提升互联网的 GDP，我们还有大量工作要做。这意味着你有机会在职业生涯中从事最重要的工作，同时让全球经济触手可及。
关于团队
在这个职位上，你将加入 Stripe 的漏洞管理团队，该团队的使命是“在 Stripe 范围内大规模揭示漏洞”。我们的愿景是创造一种持续卓越的漏洞管理文化。我们希望通过为用户提供有关影响 Stripe 系统的威胁和漏洞的上下文信息，来增强客户信任。通过提供对 Stripe 产品和服务中漏洞的可见性，我们旨在成为 Stripe 风险管理的关键合作伙伴。
你会做什么
作为 Stripe 漏洞管理方向的软件工程师，你将利用你的软件工程专业知识，在我们的系统中发现并优先处理漏洞。与公司内部的工程师紧密合作，你将推动已发现漏洞的及时修复，在 Stripe 整体安全和风险管理策略中发挥关键作用。
此外，你将持续改进 Stripe 的安全防御，通过优化我们的漏洞管理流程，并选择有效的扫描工具来发现弱点。
作为漏洞管理软件工程师，你的核心职责包括构建基于数据和代理的系统，以在 Stripe 内揭示漏洞。此外，你将协调修复措施，防止可能影响 Stripe 或其用户的漏洞被利用，并担任安全风险方面的顾问。所有这些都需要跨职能协作，以倡导加强 Stripe 系统和数据安全性的实践。
你是谁
我们寻找符合最低要求的候选人。如果你满足这些要求，我们鼓励你申请。优先资格是加分项，而非必要条件。
职责
- 使用自动化工具识别漏洞并进行适当的优先级排序
- 与其他团队合作，推动漏洞的修复
- 参与我们的整体安全和风险管理策略
查看英文原文
Who we are
About Stripe
Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone’s reach while doing the most important work of your career.
About the team
In this role, you would join Stripe's Vulnerability Management team, whose mission is to "Surface vulnerabilities at scale across Stripe." Our vision is to create a culture of continuous excellence in managing vulnerabilities. We want to enhance customer trust by giving users context about threats and vulnerabilities affecting Stripe's systems. We aim to be a key partner in Stripe's risk management by providing visibility into vulnerabilities across Stripe's products and services.
What you’ll do
As a Software Engineer focused on Vulnerability Management at Stripe, you will use your software engineering expertise to find and prioritize vulnerabilities in our systems. Working closely with engineers across the company, you will drive the timely remediation of discovered vulnerabilities, playing a key role in Stripe's overall security and risk strategy.
In addition, you will continuously improve Stripe's security defenses by enhancing our vulnerability management processes and selecting effective scanning tools to uncover weaknesses.
Your core responsibilities as a Vulnerability Management Software Engineer will involve building data- and agent-backed systems to surface vulnerabilities across Stripe. In addition, you will coordinate fixes to prevent exploits that could impact Stripe or our users and serve as an advisor on security risks. All of this requires collaborating cross-functionally to advocate for practices that strengthen the safety of Stripe's systems and data.
Who you are
We’re looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement.
Responsibilities
- Identify vulnerabilities using automated tools and triage them appropriately
- Collaborate with other teams to drive remediation of vulnerabilities
- Contribute to our overall security and risk management strategy
- Continuously improve our security posture, processes, and tools
Minimum requirements
- 2+ years of industry software engineering experience (does not include internships or co-ops)
- Software engineering experience within the security domain
- Empathy, strong communication skills and a deep respect for the power of collaboration
- Excellent problem-solving skills and attention to detail
- High standards for code quality and a constructive attitude to help others raise the bar
Preferred qualifications
- An ability to think creatively and holistically about reducing risk in a complex environment
- Familiarity with automated vulnerability identification tools and triage
- Delivery of successful projects using agents to automate human review processes
By joining our team, you will have an unprecedented opportunity to put the global economy within everyone’s reach, securely.