Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 5 hours ago

Software Engineer, Vulnerability Management

Stripe785 open roles

Where
na
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSoftware Engineer, Vulnerability ManagementStripe · na

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Stripe's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

14.0% of postings close within 7 days. Measured by our own scanner across the market. Stripe postings stay open a median of 61 days.

Share of postings closed within
  1. 2.3%1 day
  2. 4.7%3 days
  3. 14.0%7 days
  4. 22.5%14 days
  5. 38.3%30 days
  6. 59.0%60 days
This job: posted 5 hours ago

Stripe median: 61 days open

The posting

Who we are

About Stripe

Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world’s largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career.

About the team

In this role, you would join Stripe's Vulnerability Management team, whose mission is to "Surface vulnerabilities at scale across Stripe." By joining our team, you will have an unprecedented opportunity to put the global economy within everyone’s reach, securely.

Our vision is to create a culture of continuous excellence in managing vulnerabilities. We want to enhance customer trust by giving users context about threats and vulnerabilities affecting Stripe's systems. We aim to be a key partner in Stripe's risk management by providing visibility into vulnerabilities across Stripe's products and services.

What you’ll do

You’ll build the systems that identify and prioritize vulnerabilities across Stripe’s codebases, production infrastructure, and employee laptops. These collect software bills of materials (SBOMs) across tens of millions of lines of code, scan hundreds of thousands of hosts for package and kernel versions, and connect that inventory to known vulnerabilities (CVEs).

You’ll also build agentic systems to investigate emerging threats. For example, parsing breaking security news, identifying the technologies involved, and determining whether Stripe is affected.

Alongside this engineering work, you’ll help teams across Stripe understand their exposure, prioritize fixes, and drive remediation. The role combines building data pipelines and security automation with hands-on vulnerability analysis and security guidance for partner teams.

Since our systems interact with the entire Stripe codebase, you'll work in Go, Java, Ruby, and Python. The services we own are written in Go, so most of your hands-on work will be in Go. The typical balance of hands-on work is about 70% coding and 30% reasoning about security issues or providing guidance to partner teams.

Responsibilities

  • Identify vulnerabilities using automated tools and triage them appropriately
  • Collaborate with other teams to drive remediation of vulnerabilities
  • Contribute to our overall security and risk management strategy
  • Continuously improve our security posture, processes, and tools

Who you are

We're looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement.

Minimum requirements

  • 5+ years of industry software engineering experience (does not include internships or co-ops)
  • Significant software engineering experience within the security domain
  • Empathy, strong communication skills and a deep respect for the power of collaboration
  • Excellent problem-solving skills and attention to detail
  • High standards for code quality and a constructive attitude to help others raise the bar
  • Have mentored early career engineers in security and software engineering craft

Preferred qualifications

  • An ability to think creatively and holistically about reducing risk in a complex environment
  • Familiarity with automated vulnerability identification tools and triage
  • Delivery of successful projects using agents to automate human review processes
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Stripe's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Stripe's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Stripe's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.