Staff Application Security Engineer

About Privy

Our mission is to make privacy and user ownership the default online. We build simple, flexible developer tooling that make it easy to build products that put users first. By leveraging modern cryptography, we shift the status quo around digital ownership and protect the accounts and assets of millions of users.

Engineering at Privy is not just about writing world-class code. We create software that turns complex technical systems into delightful developer tools. We assemble tried-and-true primitives into intuitive, responsive APIs and beautiful interfaces. We believe in open-source work and transparency with our teammates and users. We encourage each other to think big, run experiments and follow our curiosity so we can build better tooling that lets developers shine and empower their users.

Learn more about Privy: Privy and Stripe: Bringing crypto to everyone

What you’ll do

Privy is seeking a staff application security engineer to work at the intersection of critically important authentication and data security surfaces and deep challenges of digital ownership and trusted execution environments. You'll architect security as a core part of our product, own and build out internal best practices, work directly with customers to build secure infrastructure for millions, and triage and remediate issues within the codebase.

Who you are

We’re looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement.

Minimum requirements

• 8+ years experience with implementing or maintaining security systems in production environments

• Comfortable making changes to production environments

• Understanding of modern web security best practices and common vulnerabilities

• Ability to communicate complex security concepts clearly to both technical and non-technical audiences

• A collaborative approach to security that emphasizes education and enablement

Preferred qualifications

• Experience with corporate security or information security in startups

• Blockchain security experience

• Detection and response or incident response background

• AWS security expertise

• Bug bounty hunting or red team experience

• Experience building security-focused developer tools

• Published about your work in security (presentations, blog posts, open source contributions)

Office-assigned Stripes in most of our locations are currently expected to spend at least 50% of the time in a given month in their local office or with users. This expectation may vary depending on role, team and location. For example, Stripes in our Bucharest, Romania site have an 80% in-office expectation, and those in Stripe Delivery Center roles in Mexico City, Mexico and Bengaluru, India work 100% from the office. Also, some teams have greater in-office attendance requirements, to appropriately support our users and workflows, which the hiring manager will discuss. This approach helps strike a balance between bringing people together for in-person collaboration and learning from each other, while supporting flexibility when possible.

Additional benefits for this role may include: equity, company bonus or sales commissions/bonuses; 401(k) plan; medical, dental, and vision benefits; and wellness stipends.

At Stripe, we're looking for people with passion, grit, and integrity. You're encouraged to apply even if your experience doesn't precisely match the job description. Your skills and passion will stand out—and set you apart—especially if your career has taken some extraordinary twists and turns. At Stripe, we welcome diverse perspectives and people who think rigorously and aren't afraid to challenge assumptions. Join us.