Forward Deployed Security Engineer

Job Overview

As a Forward Deployed Security Engineer at Stripe, you will play a critical part in safeguarding the company's financial ecosystem. You will respond to live fraud and abuse incidents, investigate high-risk accounts, and serve as a key bridge between incidents and merchants to help them remediate threats and improve security posture.

Responsibilities

• Respond to live fraud and abuse incidents as a hands-on security engineer, investigating high-risk activity, neutralizing active attacks, and mitigating security risks across the ecosystem.
• Investigate, mitigate, and remediate urgent fraud incidents, utilizing FT3-mapped detection and signals enrichment to reduce uncertainty and accelerate response.
• Analyze high-risk accounts to identify fraudulent merchants, card testing, account takeovers, and other fraud vectors, classifying them using FT3 to standardize threat intelligence.
• Develop, document, and execute incident response strategies, runbooks, and capabilities to continuously improve fraud and abuse detection and prevention.
• Act as a dedicated technical bridge during and after incidents to work directly with impacted merchants and customers, helping them investigate root causes, remediate vulnerabilities, and secure their accounts.
• Serve as an operational and technical liaison for legal teams, policy partners, and threat intelligence communities.
• Build and nurture strong strategic relationships across external threat intelligence communities, peer working groups, and law enforcement agencies.

Requirements

• 10+ years of experience leading security or fraud incident response;
• B.S./M.S. in Computer Science or equivalent experience;
• Expert knowledge of Python and SQL, and familiarity with other programming languages;
• Existing experience with log analysis, network security, digital forensics, and incident response investigations;
• Proven ability to build automated response workflows, leverage threat intelligence, and make risk mitigation recommendations;
• Strong written and verbal communication skills with a track record of driving cross-functional alignment with minimal oversight;
• Previous work with law enforcement;
• Engagement in threat intelligence sharing communities.

Preferred Qualifications

• Broad expertise across fraud and abuse mitigation, risk management, product trust, and threat intelligence in a complex platform environment;
• An adversarial mindset, understanding the goals, behaviors, and TTPs of threat actors;
• Experience with engineering, data processing and analysis tools;
• Familiarity with common open-source frameworks for big data processing and/or data science;
• Experience with tactical threat intelligence and/or hunting for sophisticated threat actors in an enterprise environment;
• Ability to proactively challenge the status quo by leveraging data and taking a user-centric approach to address complex product integrity challenges;
• Speaker or participant in external conferences or similar industry engagements.