客户端平台安全工程师
查看雇主原标题
Client Platform Security EngineerStripe · New York, New York
职位信息来自雇主公开的招聘页面。申请前请务必在雇主官网核实详情。
为什么值得关注？
发现指数 42/100，仅依据与该职位一起存储的证据计算。
- 新的雇主官方职位
分数构成
- 时效性 （随职位发布时间变化）+18
- 雇主官方来源+15
- 稀有职位+1
- 公司来源健康度+8
该职位未包含：已披露薪资、远程职位、提及签证担保、提及搬迁、未出现在监控的职位板上。
这些理由来自雇主自己的职位描述与我们核实过的来源检查结果。除了已存储的信号之外，我们不做任何推测。
职位描述
机器翻译我们是谁
关于 Stripe
Stripe 是一个面向企业的金融基础设施平台。数百万家公司——从全球最大的企业到最有雄心的初创公司——都在使用 Stripe 来接受付款、增长收入并加速新的商业机会。我们的使命是提升互联网的 GDP，而我们面前还有大量工作要做。这意味着，在你职业生涯中最重要的工作中，你将拥有一个前所未有的机会，让全球经济触手可及。
关于团队
Secure Devices 负责确保 Stripe 的每一个客户端端点都符合我们严格的安全标准。我们的服务在检测和防止数据丢失、将软件执行限制为仅允许已批准的软件，以及提供证明能力以安全管理设备身份方面发挥着关键作用。我们在多种平台类型上同时运营设备端和后端服务。我们以用户为先的方法确保我们赋能 Stripes 尽可能高效，同时保护用户数据。
你将做什么
作为 Secure Devices 的一名软件工程师，你将在软件开发、安全和客户端平台工程的交叉领域工作。你将与安全、基础设施和企业工程等团队合作，推动战略项目，以更好地保护 Stripe 端点，构建支持新平台的基础设施，并运营对保护超过 10,000 台 Stripe 设备至关重要的服务。
职责
• 为 Stripe 移动扩展计划的安全设计和实施做出贡献
• 作为 iOS 安全方面的主题专家，就 iOS 安全最佳实践和 secure-by-design 架构为合作团队提供建议
• 设计、构建并维护 Stripe 的端
岗位职责
作为 Secure Devices 的一名软件工程师，你将在软件开发、安全和客户端平台工程的交叉领域工作。你将与安全、基础设施和企业工程等团队合作，推动战略项目，以更好地保护 Stripe 端点，构建支持新平台的基础设施，并运营对保护超过 10,000 台 Stripe 设备至关重要的服务。
• 为 Stripe 移动扩展计划的安全设计和实施做出贡献
• 作为 iOS 安全方面的主题专家，就 iOS 安全最佳实践和 secure-by-design 架构为合作团队提供建议
• 设计、构建并维护 Stripe 的端点安全软件。这包括通过运行在所有 Stripe macOS 设备上的 macOS 系统扩展来开发遥测和防护能力
• 与合作团队紧密协作，定义并衡量 Stripe 客户端平台（macOS、iOS/Android、ChromeOS）的安全配置
• 运营高 RPS 后端服务，为 Stripe 端点提供关键控制和安全配置
• 减少未经批准、不受信任软件的使用，同时为新批准软件的入门创造令人惊喜的良好用户体验
• 管理和改进设备证明流程，以确保 Stripe 的设备和用户身份保持安全
• 识别 Stripe 客户端平台上的机会，以改善我们的安全态势以及对恶意软件和高级持续性威胁的韧性
• 构建并维护一个以用户为先的数据丢失防护计划，以防止意外和恶意的数据外泄
任职要求
我们正在寻找满足该职位最低要求的人选。如果你满足这些要求，我们鼓励你申请。优先资格是加分项，而非要求。
最低要求
• 4 年以上保护 iOS 和/或 macOS 平台的相关经验
• 4 年以上使用 Go、Swift 或 Objective-C 编写软件的软件工程经验
• 在 Apple 生态系统中保护设备的深厚专业知识
• 了解当前威胁态势，以及如何保护 Apple 设备免受现代威胁
• 对代码质量有高标准，并具有建设性态度以帮助他人提高标准
• 能够在复杂环境中创造性和整体性地思考如何降低风险
• 在遇到没有明确责任归属的模糊领域时，能够推动明确的下一步行动
• 同理心、强大的沟通能力，以及对协作力量的深切尊重
• 了解 macOS 或 iOS 内部机制，以及如何利用它们构建安全控制和软件
• 接触过数据丢失防护策略
• 能够开发可处理大量请求的后端网络应用
• 具备保护客户端设备的一般能力
• 了解平台加固、恶意软件检测以及通过 configuration as code 进行端点管理等主题
• 了解技术栈各层的网络协议 • TCP、DNS、SSH、TLS、HTTP
• 具备 Linux 系统管理知识
• 具备保护包括 Windows 和 Android 在内的其他平台的额外经验
以上内容由机器翻译自动生成，可能存在错误；投递前请以雇主原文为准。
查看雇主原文
职位描述
Who we are
About Stripe
Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone’s reach while doing the most important work of your career.
About the team
Secure Devices is responsible for ensuring that every client endpoint at Stripe adheres to our rigorous security standards. Our services play a crucial role in detecting and preventing data loss, restricting software execution to only approved software, and providing attestation capabilities to securely manage device identities. We operate both on-device and backend services across multiple platform types. Our users-first approach ensures that we’re empowering Stripes to be as productive as possible while protecting user data.
What you’ll do
As a software engineer on Secure Devices, you will work at the intersection of software development, security, and client platform engineering. You will work with teams across Security, Infrastructure and Corporate Engineering to drive strategic projects to better secure Stripe endpoints, build infrastructure for supporting new platforms, and operate services critical to securing over 10,000 Stripe devices.
Responsibilities
• Contribute to the secure design and implementation of Stripe’s mobile expansion initiative
• Act as the subject matter expert on iOS security by advising partner teams on iOS security best practices and secure-by-design architectures
• Design, build and maintain Stripe’s end
岗位职责
As a software engineer on Secure Devices, you will work at the intersection of software development, security, and client platform engineering. You will work with teams across Security, Infrastructure and Corporate Engineering to drive strategic projects to better secure Stripe endpoints, build infrastructure for supporting new platforms, and operate services critical to securing over 10,000 Stripe devices.
• Contribute to the secure design and implementation of Stripe’s mobile expansion initiative
• Act as the subject matter expert on iOS security by advising partner teams on iOS security best practices and secure-by-design architectures
• Design, build and maintain Stripe’s endpoint security software. This includes developing telemetry and prevention capabilities via macOS system extensions that run on all Stripe macOS devices
• Collaborate closely with partner teams to define and measure the secure configuration of Stripe’s client platforms (macOS, iOS/Android, ChromeOS)
• Operate high RPS backend services providing critical controls and security configuration to Stripe endpoints
• Drive down usage of unapproved, untrusted software while creating a surprisingly great user experience for onboarding new, approved software
• Manage and improve device attestation flows to ensure Stripe’s device and user identities are kept secure
• Identify opportunities on Stripe client platforms to improve our security posture and resiliency against malware and advanced persistent threats
• Build and maintain a users-first data loss prevention program to protect against accidental and malicious data exfiltration
任职要求
We’re looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement.
Minimum requirements
• 4+ years of relevant experience securing iOS and/or macOS platforms
• 4+ years of software engineering experience writing Go, Swift or Objective-C
• Deep expertise securing devices within the Apple ecosystem
• Understanding of the current threat landscape and how to defend Apple devices against modern threats
• High standards for code quality and a constructive attitude to help others raise the bar
• An ability to think creatively and holistically about reducing risk in a complex environment
• The ability to drive clear next steps when encountering ambiguous spaces without clear lines of ownership
• Empathy, strong communication skills and a deep respect for the power of collaboration
• Knowledge of macOS or iOS internals and how they can be used to build security controls and software
• Exposure to data loss prevention strategies
• Ability to develop backend networked applications capable of handling a high number of requests
• General proficiency in securing client devices
• Understanding of topics such as platform hardening, malware detection, and endpoint management through configuration as code
• Understanding of networking protocols across various levels of the stack • TCP, DNS, SSH, TLS, HTTP
• Linux system administration knowledge
• Additional experience securing alternative platforms including Windows and Android