Senior Abuse Control Engineer

Stripe, Inc.; Barcelona; On-site; EUR 90,000 - 130,000; Full time

Job summary

Stripe is seeking an Abuse Control Engineer within the ACE team in Barcelona to design and incubate defenses that protect Stripe’s financial ecosystem from advanced abuse across API, payments, identity, and onboarding surfaces.

You will translate threat intelligence into precise control requirements, build automated regression suites, and partner with product engineering to transfer mature defenses to long-term ownership. Strong coding, testing, and cross-functional collaboration are essential.

Qualifications

• 10+ years of experience in security engineering, software engineering, application security, or anti-abuse engineering in a high-scale production environment.
• A bachelor’s or master’s degree in computer science, cybersecurity, software engineering, or a related technical field, or equivalent practical experience.
• A strong software development background, with proficiency in Python, Go, Java, or a similar production programming language, as well as advanced SQL skills for analyzing system telemetry.
• Experience using frontier AI models for software development, learning, and analysis.
• Hands-on experience building API-level safeguards, rate-limiting frameworks, authentication or authorization checks, or input-validation controls.
• Experience with automated testing frameworks, including writing unit, integration, and regression tests for critical backend software.
• Strong cross-functional collaboration and communication skills, with a track record of partnering across security, product, and platform teams to drive technical outcomes.

Responsibilities

• Rapid control prototyping: Design, prototype, and deploy technical controls across API, protocol, and product boundaries to address high-impact abuse vectors.
• Evidence-based technical requirements: Translate empirical attacker evidence and FT3 threat research from Abuse Research, Fraud, and Security teams into precise technical abuse requirements and control specifications.
• Control co-design: Collaborate with teams across Stripe to design resilient, secure controls across payments, onboarding, identity, and Connect surfaces.
• Risk experimentation: Run rigorous experiments and A/B tests to measure risk reduction against the impact on legitimate user conversion, optimizing controls to minimize friction while neutralizing threats.
• Regression testing: Build comprehensive regression test suites and automated attack simulations with Abuse Research to ensure mitigated abuse vectors do not recur.
• Stakeholder management: Define handoff criteria, operational documentation, timelines, and transfer of successful controls to product teams.

Skills

Python

Go

Java

SQL

Security engineering

Anti-abuse engineering

API safeguards

Automated testing

Cross-functional collaboration

Threat modeling

Education

Bachelor's or Master's in CS/Cybersecurity/Software Engineering

Equivalent practical experience

Tools

Databricks

Trino

PySpark

Unit testing frameworks

Integration testing

Job description

Stripe is seeking an Abuse Control Engineer within the ACE team in Barcelona to design and incubate defenses that protect Stripe’s financial ecosystem from advanced abuse across API, payments, identity, and onboarding surfaces.

You will translate threat intelligence into precise control requirements, build automated regression suites, and partner with product engineering to transfer mature defenses to long-term ownership. Strong coding, testing, and cross-functional collaboration are essential.