Description
Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world’s largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet.
The Abuse Operations team is the front-line incident response and remediation function handling active product abuse and fraud impacting Stripe and its merchants. This multi-disciplinary group neutralizes active attacks, gathers requirements for operational tooling, and leads incidents.
You will play a critical role in safeguarding our financial ecosystem by investigating high-risk accounts and identifying complex patterns of fraud during incidents. You will lead incident response for product abuse and fraud events, conducting deep-dive analyses to identify root causes. By collaborating cross-functionally, you will drive improvements that enhance our fraud detection and prevention strategies at scale.
Responsibilities:
- Investigate, mitigate, and remediate urgent fraud incidents, utilizing FT3-mapped detection and signals enrichment to reduce uncertainty and accelerate response.
- Analyze high-risk accounts to identify fraudulent merchants, card testing, account takeovers, and other fraud vectors, classifying them using FT3 to standardize threat intelligence.
- Lead incident root cause analyses to identify gaps in current systems and strategies, leveraging the FT3 framework, data-driven model to drive enhancements and process improvements for emerging fraud risks.
- Streamline incident response capabilities, ensuring the tooling and processes are clear, accurate and efficient.
- Work cross-functionally with security, fraud and data science teams to build agentic solutions for responding to abuse incidents at scale.
- Effectively communicate cross-functionally with legal and policy teams to assess and mitigate risks, while demonstrating strong problem-solving under pressure.
- Collaborate effectively with teammates, leading projects, mentoring others, and developing and championing quality standards within the team.
Minimum requirements:
- 10+ years of experience conducting incident response in security, product abuse or trust domains.
- 10+ years experience analyzing large data sets to solve problems and/or building models with a behavioral approach to fraud detection.
- B.S. or M.S. Computer Science or related field, or equivalent experience.
- Expert knowledge of Python and SQL, and familiarity with other programming languages.
- Existing experience with log analysis, network security, digital forensics, and incident response investigations.
- Ability to communicate results clearly and focus on impact.
- Ability to think creatively and holistically about reducing risk in a complex environment.
Preferred qualifications:
- An adversarial mindset, understanding the goals, behaviors, and TTPs of threat actors.
- Experience with engineering, data processing and analysis tools.
- Familiarity with common open-source frameworks for big data processing and/or data science.