The opportunity
The Security Incident Response team works to analyze, investigate, and respond to threats before they impact Stripe’s business or users. From external attacks to insider threats, our goal is to respond with speed and precision, remediate, and support the incident postmortem process.
What you'll do
Analyze and investigate activity on company devices and cloud infrastructure: that could represent a security threat
Work cross-functionally with the Security teams to develop solutions for: analyzing security events at scale and protecting Stripe networks, systems, and data
Interpret disparate data sources to report on trends and support investigative requests
Collect requirements for enhancements to detection models and response systems
Leverage existing systems and data to perform analyses and promote process improvements
Provide actionable insights to help identify, prevent, detect, and respond to: anomalous or potentially malicious user activity
What they're looking for
- + years experience in information technology or cyber security roles including incident response
- + years experience analyzing large data sets to solve problems and/or manage: projects related to security event triage and/or workplace investigations
- Prior experience investigating and triaging security threats on endpoint: devices including Mac, Linux, and Windows, as well as cloud infrastructure across AWS, Azure, and GCP.
- B.S. or M.S. in Cyber Security and Information Assurance, Data Analytics,: Computer Science or related field, or equivalent experience
- Working knowledge of SQL
- Basic knowledge of scripting or programming in Python, Go, or other programming languages
- Proven experience with log querying and analysis (e.g. first or third party: applications, system / data access, event logs), digital forensics, or incident response using one or more industry standard SIEM Platforms (Splunk, Sentinel, Chronicle, Elastic, etc.)
- Proficiency using analytical methods to inform detection systems or guide strategic response
