Data Scientist, Application Security and Vulnerability id-6117

April 9, 2025

About the team

Our mission is to deliver insightful analyses and durable data products to anticipate and inform the right decisions at the right time about Stripe's cloud, security and tech enablement infrastructures.

What you’ll do

You will work with our Security Analytics and Detection team, which is committed to promoting data security and protecting Stripe from internal and external threats to its assets and infrastructure. We’re looking for talented candidates who can leverage data science to build out security capabilities with an emphasis on application security and vulnerability management. Your work will be critical to reducing risks and promoting trust and integrity within Stripe.

Other Jobs You May Be Interested In

Responsibilities

Research, develop, design, and build models for threat detection, guiding processes for signal ingestion, data analytics, and automation to improve detection and investigation of potentially malicious activity;
Work cross-functionally with data science, software development, and security engineering teams to architect solutions for analyzing security events data at scale and protecting Stripe networks, systems, and data from external threats;
Build statistical, machine learning, and simulation models on large datasets, including unstructured data from disparate sources;
Drive the creation, collection and processing of new data and the enrichment of existing data sources (e.g., log data, network, host-based telemetry, etc.);
Develop technical and functional requirements to deploy novel detection and vulnerability identification capabilities that mitigate emergent and current threats;
Provide actionable insights to stakeholders to help identify, prevent, and detect anomalous usage of Stripe’s endpoints;
Act as a force multiplier for quantitative methods in our Security organization and help train and mentor engineers on statistical

Who you are

We’re looking for a data scientist with security experience who is excited about applying their analytical skills to develop methods, systems and processes to protect Stripe from external threats and vulnerabilities. If you are naturally data curious, enjoy deriving insights from data, and motivated by the opportunity to build engineering solutions from the ground up that significantly impact the business, we want to hear from you! Minimum requirements

5+ years experience working with security-related information and analyzing large data sets to solve problems.
A PhD or MS in a quantitative field (e.g., Applied Mathematics, Computer Science, Statistics, Engineering, Natural Sciences).
A proven track record of translating large and ambiguous business problems in mathematical models and developing data scientific
Existing experience with network security, digital forensics, and incident response.
Expert knowledge of Python and SQL, and familiarity with other programming languages (R, Go, Scala).
Proficiency with popular open-source machine learning frameworks (scikit-learn, MLlib, pytorch, tensorflow, xgboost, etc.).
Strong knowledge of statistics and machine learning.
Ability to communicate results clearly and focus on impact.
Ability to think creatively and holistically about reducing risk in a complex environment.
Experience developing foundational and diverse data sources, and generating metrics to measure service and program effectiveness.
Passion for mentoring others and building a data science and security

Preferred qualifications

Experience influencing high-impact decisions.
Strong project management and organizational skills.
Proficiency in taking data-driven approaches to detection, building and automating solutions rather than relying on third party off-the-shelf products.
Experience with data-distributed tools (Scalding, Spark, Hadoop, DataBricks, dbt, etc.).
An adversarial mindset, understanding the goals, behaviors, and TTPs of threat actors.
Familiarity with network observability or security software (Uptycs, Icebrg, Splunk, etc.).
Knowledge of network protocols (DNS or HTTPS) and understanding of cloud computing services/deployment architecture.
Working knowledge of complex distributed machine learning systems deployed at scale in a cloud computing environment.
Experience in one or more of the following areas: security information event management (SIEM), enterprise risk management (ERM), common weakness enumeration (CWE), and/or fraud detection.

Back to blog

Common Interview Questions And Answers

1. HOW DO YOU PLAN YOUR DAY?

This is what this question poses: When do you focus and start working seriously? What are the hours you work optimally? Are you a night owl? A morning bird? Remote teams can be made up of people working on different shifts and around the world, so you won't necessarily be stuck in the 9-5 schedule if it's not for you...

2. HOW DO YOU USE THE DIFFERENT COMMUNICATION TOOLS IN DIFFERENT SITUATIONS?

When you're working on a remote team, there's no way to chat in the hallway between meetings or catch up on the latest project during an office carpool. Therefore, virtual communication will be absolutely essential to get your work done...

3. WHAT IS "WORKING REMOTE" REALLY FOR YOU?

Many people want to work remotely because of the flexibility it allows. You can work anywhere and at any time of the day...

4. WHAT DO YOU NEED IN YOUR PHYSICAL WORKSPACE TO SUCCEED IN YOUR WORK?

With this question, companies are looking to see what equipment they may need to provide you with and to verify how aware you are of what remote working could mean for you physically and logistically...

5. HOW DO YOU PROCESS INFORMATION?

Several years ago, I was working in a team to plan a big event. My supervisor made us all work as a team before the big day. One of our activities has been to find out how each of us processes information...

6. HOW DO YOU MANAGE THE CALENDAR AND THE PROGRAM? WHICH APPLICATIONS / SYSTEM DO YOU USE?

Or you may receive even more specific questions, such as: What's on your calendar? Do you plan blocks of time to do certain types of work? Do you have an open calendar that everyone can see?...

7. HOW DO YOU ORGANIZE FILES, LINKS, AND TABS ON YOUR COMPUTER?

Just like your schedule, how you track files and other information is very important. After all, everything is digital!...

8. HOW TO PRIORITIZE WORK?

The day I watched Marie Forleo's film separating the important from the urgent, my life changed. Not all remote jobs start fast, but most of them are...

9. HOW DO YOU PREPARE FOR A MEETING AND PREPARE A MEETING? WHAT DO YOU SEE HAPPENING DURING THE MEETING?

Just as communication is essential when working remotely, so is organization. Because you won't have those opportunities in the elevator or a casual conversation in the lunchroom, you should take advantage of the little time you have in a video or phone conference...

10. HOW DO YOU USE TECHNOLOGY ON A DAILY BASIS, IN YOUR WORK AND FOR YOUR PLEASURE?

This is a great question because it shows your comfort level with technology, which is very important for a remote worker because you will be working with technology over time...

DISCLAIMER