Requirements

• 10+ years of experience in security engineering, software engineering, application security, or anti-abuse engineering in a high-scale production environment.
• Bachelor’s or master’s degree in computer science, cybersecurity, software engineering, or a related technical field, or equivalent practical experience.
• Strong software development background with proficiency in Python, Go, Java, or similar languages, plus advanced SQL skills for system telemetry analysis.
• Experience using frontier AI models for software development, learning, and analysis.
• Hands-on experience building API-level safeguards, rate-limiting frameworks, authentication/authorization checks, or input-validation controls.
• Experience with automated testing frameworks, including unit, integration, and regression testing for backend software.
• Strong cross-functional collaboration and communication skills with a track record of partnering across security, product, and platform teams.

Nice to Haves

• Experience designing and executing A/B tests, evaluating efficacy, and balancing security with user conversion friction.
• Expertise in threat modeling, secure systems architecture, and modern application-security design principles.
• Familiarity with threat frameworks such as FT3 or MITRE ATT&CK and adversary kill-chain analysis.
• Knowledge of financial fraud vectors, attacker tactics, and infrastructure including account takeover, card testing, and credential stuffing.
• Hands-on experience with large-scale data-processing platforms like Databricks, Trino, or PySpark.
• Experience incubating software features and establishing operational handoff criteria for ownership transfer.

What You’ll Be Doing

• Designing, prototyping, and incubating technical defenses to protect Stripe’s financial ecosystem from complex abuse vectors.
• Rapidly building and testing safeguards guided by attacker telemetry and the Fraud Taxonomy 3.0 framework.
• Translating threat intelligence into precise technical control requirements such as API rate limits and pre-debit holds.
• Running experiments to balance risk reduction with legitimate user conversion.
• Managing control lifecycles, building regression suites to prevent recurring threats, and partnering with product teams for control transfers.
• Collaborating cross-functionally to design resilient controls across payments, onboarding, identity, and Connect surfaces.
• Executing ACE’s incubation model with stakeholder management and operational documentation.