Design, prototype, and deploy technical safeguards across API, protocol, and product boundaries to address abuse vectors.
Translate attacker evidence and threat research into precise abuse requirements and control specifications.
Co-design resilient controls across payments, onboarding, identity, and Connect surfaces.
Run experiments and A/B tests to measure risk reduction against legitimate-user conversion and optimize control friction.
Build regression test suites and automated attack simulations to prevent recurring abuse.
Define handoff criteria, operational documentation, timelines, and target dates for transferring mature controls to product teams.
Requirements
10+ years of experience in security engineering, software engineering, application security, or anti-abuse engineering in a high-scale production environment.
Bachelor’s or master’s degree in computer science, cybersecurity, software engineering, or a related technical field, or equivalent practical experience.
Strong software development background with proficiency in Python, Go, Java, or a similar production language, plus advanced SQL skills.
Experience using frontier AI models for software development, learning, and analysis.
Hands-on experience building API safeguards, rate-limiting frameworks, authentication or authorization checks, or input-validation controls.
Experience writing unit, integration, and regression tests for critical backend software.
Strong cross-functional collaboration and communication skills.
Preferred qualifications include A/B testing, threat modeling, secure systems architecture, application security, FT3 or MITRE ATT&CK, adversary kill-chain analysis, financial fraud knowledge, and large-scale data-processing experience with Databricks, Trino, or PySpark.
Stripe
Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities.