Staff Security Engineer: Abuse Control & Rapid Defense

Stripe; Dublin; On-site; EUR 132,000 - 198,000; Full time

Job summary

Stripe is seeking an Abuse Control Engineer on the ACE team in Dublin to design, prototype, and incubate technical defenses that safeguard Stripe’s financial ecosystem against cross-cutting abuse vectors.

You'll translate threat intelligence into precise control requirements, such as API rate limits, step-up challenges, and input validation, while balancing security with user experience and conversion.

Qualifications

• 10+ years of experience in security engineering or related fields in high-scale environments.
• Bachelor’s or Master’s in CS, cybersecurity, software engineering, or an equivalent practical background.
• Strong software development background with Python/Go/Java and advanced SQL for telemetry analysis.
• Hands-on experience building API safeguards, rate-limiting, authentication or input validation controls.
• Experience with automated testing frameworks and cross-functional collaboration.

Responsibilities

• Rapid control prototyping across API, protocol, and product boundaries to mitigate abuse vectors.
• Translate attacker evidence and FT3 threat research into precise technical requirements and controls.
• Co-design resilient controls with Stripe teams for payments, onboarding, identity, and Connect surfaces.
• Run experiments and A/B tests to balance risk reduction with legitimate user conversion.
• Build regression test suites and automated attack simulations with Abuse Research.
• Define handoff criteria and transfer successful controls to product teams.

Skills

Security engineering

Software engineering

API security

Threat modeling

Python

Go

Java

SQL

Automated testing

Cross-functional collaboration

Education

Bachelor's or Master's in CS, cybersecurity, software engineering, or related field

Tools

Databricks

Trino

PySpark

Job description

Stripe is seeking an Abuse Control Engineer on the ACE team in Dublin to design, prototype, and incubate technical defenses that safeguard Stripe’s financial ecosystem against cross-cutting abuse vectors.

You'll translate threat intelligence into precise control requirements, such as API rate limits, step-up challenges, and input validation, while balancing security with user experience and conversion.