# Security Engineer

**Company**: Stripe
**Location**: US Remote
**Work arrangement**: remote
**Experience**: senior
**Job type**: full-time
**Category**: Engineering
**Industry**: Finance

**Apply**: https://job-boards.greenhouse.io/stripe/jobs/8174965?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_7cbe3085-761

## Description

## Job Description

As an Abuse Control Engineer on the Abuse Control Engineering (ACE) team, you will design, prototype, and incubate technical defenses that safeguard Stripe's financial ecosystem against complex, cross-cutting abuse vectors.

### Responsibilities

- Rapid Control Prototyping: Design, prototype, and deploy technical controls across API, protocol, and product boundaries to immediately close high-impact abuse vectors.

- Evidence-Based Technical Requirements: Translate empirical attacker evidence and FT3 threat research into precise technical abuse requirements and control specifications.

- Control Co-Design: Collaborate closely with teams across Stripe to co-design resilient, secure controls across payment, onboarding, identity, and Connect surfaces.

- Risk Experimentation: Run rigorous experiments and A/B tests to measure risk reduction against legitimate user conversion impact, optimizing controls to minimize friction while neutralizing threats.

- Regression Testing: Build comprehensive regression testing suites and automated attack simulations with Abuse Research to ensure mitigated abuse vectors do not recur.

- Stakeholder Management: Execute ACE's incubation model by defining handoff criteria, operational documentation, and target dates to transfer successful controls to product teams.

### Requirements

- 3+ years of experience in Security Engineering, Software Engineering, Application Security, or Anti-Abuse Engineering in a high-scale production environment.

- B.S. or M.S. in Computer Science, Cybersecurity, Software Engineering, or a related technical field, or equivalent practical experience.

- Strong software development background with expert proficiency in Python, Go, Java, or similar production languages, alongside expert SQL skills for analyzing system telemetry.

- Hands-on engineering experience building API-level safeguards, rate-limiting frameworks, authentication/authorization checks, or input validation controls.

- Demonstrated experience with automated testing frameworks, including writing unit, integration, and regression tests for critical backend software.

- Strong cross-functional collaboration and communication skills, with a track record of partnering across security, product, and platform teams to drive technical outcomes.

### Preferred Qualifications

- Proven track record of designing and executing A/B tests, evaluating control efficacy, and balancing security safeguards against user conversion friction.

- Deep expertise in threat modeling, secure system architecture, and modern application security design principles.

- Familiarity with established threat frameworks (e.g., FT3, MITRE ATT&CK) and applying adversary kill chain analysis to build resilient defenses.

- Strong domain knowledge of financial fraud vectors, threat actor TTPs, and attacker infrastructure (e.g., Account Takeover, Card Testing, Credential Stuffing).

- Hands-on experience with large-scale data processing platforms (e.g., Databricks, Trino, PySpark) to monitor and measure control performance across distributed systems.

- Demonstrated capability in incubating software features, establishing clear operational handoff criteria, and seamlessly transitioning ownership to partner engineering teams.

## Skills

### Required
- Python
- Go
- Java
- SQL
- Security Engineering
- Software Engineering
- Application Security
- Anti-Abuse Engineering
- Automated testing frameworks

### Nice to have
- A/B testing
- Threat modeling
- Secure system architecture
- FT3
- MITRE ATT&CK
- Large-scale data processing platforms
- Databricks
- Trino
- PySpark

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/stripe/jobs/8174965?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)