Forward-Deployed Security Engineer: Live Fraud Response

FDE Times; Dublin; On-site; EUR 100,000 - 150,000; Full time

Job summary

Stripe is seeking a Forward Deployed Security Engineer to lead live fraud and abuse incident response and work directly with merchants to remediate threats. You will investigate high-risk accounts, perform post-incident analyses, and drive improvements in security tooling and processes.

The role requires deep technical skills in Python, SQL, log analysis, and collaboration with legal, policy, and threat intelligence teams.

Qualifications

• 10+ years of experience leading security or fraud incident response.
• BS/MS in Computer Science or equivalent experience.
• Expert knowledge of Python and SQL, and familiarity with other programming languages.
• Existing experience with log analysis, network security, digital forensics, and incident response investigations.
• Proven ability to build automated response workflows and leverage threat intelligence.
• Strong written and verbal communication skills with cross-functional alignment.

Responsibilities

• Respond to live fraud and abuse incidents as a Forward Deployed Security Engineer and mitigate security risks.
• Investigate high-risk accounts, perform post-incident analyses, and drive remediation.
• Develop incident response strategies, runbooks, and capabilities to improve detection.
• Act as a technical bridge between incidents and merchants to remediate threats.

Skills

Python

SQL

Log analysis

Incident response

Security engineering

Communication

Law enforcement collaboration

Education

BS/MS in Computer Science

Tools

Databricks

Trino

PySpark

Pandas

Sci-kit Learn

Job description

Stripe is seeking a Forward Deployed Security Engineer to lead live fraud and abuse incident response and work directly with merchants to remediate threats. You will investigate high-risk accounts, perform post-incident analyses, and drive improvements in security tooling and processes.

The role requires deep technical skills in Python, SQL, log analysis, and collaboration with legal, policy, and threat intelligence teams.