Abuse Control Engineer — Rapid Security Defenses

Stripe; United States; On-site; USD 173,000 - 260,000; Full time

Benefits offered by this job

Equity

Medical, dental, and vision benefits

Wellness stipends

Job summary

Stripe's Abuse Control Engineering (ACE) team seeks an Abuse Control Engineer to design, prototype, and incubate technical defenses safeguarding Stripe’s financial ecosystem from complex abuse vectors. You will translate threat intelligence into precise control requirements and drive automated safeguards across API and product surfaces.

Collaborating with product engineers, you’ll implement rate-limiting, authentication checks, and input validation while balancing security with product velocity.

Qualifications

• 3+ years of experience in Security Engineering, Software Engineering, Application Security, or Anti-Abuse Engineering in a high-scale production environment.
• B.S. or M.S. in Computer Science, Cybersecurity, Software Engineering, or a related technical field, or equivalent practical experience.
• Strong software development background with expert proficiency in Python, Go, Java, or similar production languages, alongside expert SQL skills for analyzing system telemetry.

Responsibilities

• Rapid Control Prototyping: Design, prototype, and deploy technical controls across API, protocol, and product boundaries to immediately close high-impact abuse vectors.
• Control Co-Design: Collaborate closely with teams across Stripe to co-design resilient, secure controls across payment, onboarding, identity, and Connect surfaces.
• Risk Experimentation: Run rigorous experiments and A/B tests to measure risk reduction against legitimate user conversion impact, optimizing controls to minimize friction while neutralizing threats.
• Regression Testing: Build comprehensive regression testing suites and automated attack simulations with Abuse Research to ensure mitigated abuse vectors do not recur.
• Stakeholder Management: Define handoff criteria, operational documentation, and target dates to transfer successful controls to product teams.

Skills

Python

Go

Java

SQL

API safeguards

Automated testing

Collaboration

Security engineering

Threat modeling

Education

Bachelor's or Master's in CS/Cybersecurity/Software Eng

Tools

Databricks

Trino

PySpark

FT3 framework

Job description

Stripe's Abuse Control Engineering (ACE) team seeks an Abuse Control Engineer to design, prototype, and incubate technical defenses safeguarding Stripe’s financial ecosystem from complex abuse vectors. You will translate threat intelligence into precise control requirements and drive automated safeguards across API and product surfaces.

Collaborating with product engineers, you’ll implement rate-limiting, authentication checks, and input validation while balancing security with product velocity.