{"id":4283464,"url":"https://alion.io/job/stripe-software-engineer-vulnerability-management-2","title":"Software Engineer, Vulnerability Management","company":{"id":64,"name":"Stripe","domain":"stripe.com","url":"https://alion.io/company/stripe","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":77,"open_postings":140,"ghost_share":0.05,"stale_share":0.55,"repost_share":0.079,"time_to_fill_p50_days":63,"computed_at":"2026-11-14T05:58:10Z"}},"role":"Backend","role_family":"Backend","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Java","optional":false},{"name":"Python","optional":false},{"name":"Ruby","optional":false}],"status":"live","first_seen_at":"2026-11-13T18:29:47Z","employer_posted_date":"2026-11-13","last_verified_at":"2026-11-14T21:05:10Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Who we are\nAbout Stripe\nStripe is a financial infrastructure platform for businesses. Millions of companies - from the world’s largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career.\nAbout the team\nIn this role, you would join Stripe's Vulnerability Management team, whose mission is to \"Surface vulnerabilities at scale across Stripe.\" By joining our team, you will have an unprecedented opportunity to put the global economy within everyone’s reach, securely.\nOur vision is to create a culture of continuous excellence in managing vulnerabilities. We want to enhance customer trust by giving users context about threats and vulnerabilities affecting Stripe's systems. We aim to be a key partner in Stripe's risk management by providing visibility into vulnerabilities across Stripe's products and services.\nWhat you’ll do\nYou’ll build the systems that identify and prioritize vulnerabilities across Stripe’s codebases, production infrastructure, and employee laptops. These collect software bills of materials (SBOMs) across tens of millions of lines of code, scan hundreds of thousands of hosts for package and kernel versions, and connect that inventory to known vulnerabilities (CVEs).\nYou’ll also build agentic systems to investigate emerging threats. For example, parsing breaking security news, identifying the technologies involved, and determining whether Stripe is affected.\nAlongside this engineering work, you’ll help teams across Stripe understand their exposure, prioritize fixes, and drive remediation. The role combines building data pipelines and security automation with hands-on vulnerability analysis and security guidance for partner teams.\nSince our systems interact with the entire Stripe codebase, you'll work in Go, Java, Ruby, and Python. The services we own are written in Go, so most of your hands-on work will be in Go. The typical balance of hands-on work is about 70% coding and 30% reasoning about security issues or providing guidance to partner teams.\nResponsibilities\nIdentify vulnerabilities using automated tools and triage them appropriately\nCollaborate with other teams to drive remediation of vulnerabilities\nContribute to our overall security and risk management strategy\nContinuously improve our security posture, processes, and tools\nWho you are\nWe're looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement.\nMinimum requirements\n5+ years of industry software engineering experience (does not include internships or co-ops)\nSignificant software engineering experience within the security domain\nEmpathy, strong communication skills and a deep respect for the power of collaboration\nExcellent problem-solving skills and attention to detail\nHigh standards for code quality and a constructive attitude to help others raise the bar\nHave mentored early career engineers in security and software engineering craft\nPreferred qualifications\nAn ability to think creatively and holistically about reducing risk in a complex environment\nFamiliarity with automated vulnerability identification tools and triage\nDelivery of successful projects using agents to automate human review processes","description_format":"text","description_chars":3614,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Endpoint Security","Information Security","Vulnerability Management","Payment Processing & Gateways"],"lifecycle":[{"event":"open","at":"2026-11-13T21:00:40Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 319 · green card filings: 110","filings_12m":319,"filings_prev_12m":318,"green_card_filings_12m":110,"median_offered_wage_usd":168770,"route":null,"cap_exempt":false,"checked_at":"2026-11-14T07:33:33+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":198}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":0,"expected_fill_days":63,"reasons":["conf:3","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-14T05:58:10Z"},"pay":null,"html_url":"https://alion.io/job/stripe-software-engineer-vulnerability-management-2","json_url":"https://alion.io/job/stripe-software-engineer-vulnerability-management-2.json","meta":{"generated_at":"2026-11-14T21:49:47Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":28278,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":64},"rest":"https://alion.io/mcp/rest/get_company?id=64"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fstripe-software-engineer-vulnerability-management-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fstripe-software-engineer-vulnerability-management-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fstripe-software-engineer-vulnerability-management-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/stripe-software-engineer-vulnerability-management-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fstripe-software-engineer-vulnerability-management-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4283464}},{"tool":"search_jobs","arguments":{"company":"stripe.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4283464},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}