🛠 Tech Stack

💼 About This Role

You'll design, build, and maintain detections for malicious activity across Stripe's infrastructure, applications, and cloud environments. You'll leverage attacker TTPs to develop high-fidelity detection logic while minimizing noise. The team sits at the intersection of offense and defense, partnering closely with Threat Intelligence and Incident Response.

🎯 What You'll Do

• Design, build, and tune high-fidelity detections across modern SIEM platforms
• Develop detection hypotheses by researching TTPs and identifying evidence sources
• Conduct hypothesis-driven threat hunts to identify malicious activity and gaps
• Perform malware analysis and reverse engineering to extract indicators
• Build network-based and endpoint-based detections across Windows, Linux, macOS

📋 Requirements

• 5+ years of experience in detection engineering, threat hunting, or security operations
• Experience writing detection logic in modern SIEM platforms (e.g., Splunk, Chronicle, Elastic)
• Strong understanding of adversary tradecraft across the entire attack lifecycle
• Proficiency in detection/query languages (SPL, KQL, EQL, YARA-L, SQL) and programming (Python)

✨ Nice to Have

• Experience in fintech or highly regulated environments
• Background in malware analysis, reverse engineering, or threat research
• Familiarity with big data platforms (Databricks, Trino, PySpark)

🎁 Benefits & Perks

• 🏖️ Health insurance
• 💰 401(k) with match
• 🏢 Remote-friendly culture
• 📚 Learning & development budget
• ✈️ Travel opportunities

📨 Hiring Process

Estimated timeline: 2-4 weeks · AI estimate

1. 1Recruiter Call· 30 min
2. 2Technical Assessment· 60 min
3. 3Team Interview· 45 min
4. 4Hiring Manager Interview· 45 min