Abuse Investigator

Free resume; Seattle (WA); On-site; USD 180,000 - 240,000; Full time

Job summary

Stripe in Seattle, WA is seeking an experienced incident responder to lead high-risk fraud investigations and incident handling for product abuse. You will analyze patterns, drive improvements in detection, and coordinate with security, data science and legal teams.

The role requires 10+ years in incident response, expert Python/SQL, and strong data analysis. You will mentor teammates and help scale fraud prevention in a fast-moving fintech environment.

Qualifications

• 10+ years in incident response security or trust domains.
• Experience analyzing large datasets and building behavioral fraud models.
• Expert in Python and SQL; proficient in other languages.
• Experience with log analysis and digital forensics.
• Ability to communicate results clearly and impact-focused.

Responsibilities

• Investigate, mitigate, and remediate urgent fraud incidents (ATO, card testing).
• Identify fraudulent merchants and fraud vectors in incidents.
• Lead root-cause analyses using FT3 to drive improvements.
• Improve tooling and processes for scalable incident response.
• Collaborate with legal, security, and data science teams.
• Mentor teammates and champion quality standards.

Skills

Python

SQL

Incident response

Data analysis

Communication

Education

Bachelor's or Master's in Computer Science or related field

Tools

FT3 framework

Log analysis tools

Job description

Who we are

About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world’s largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career.

About the team

Abuse Operations is the front-line incident response and remediation function handling active product abuse and fraud impacting Stripe and its merchants. This multi-disciplinary group, spanning Incident Managers, Investigators, Forward Deployed Security Engineers, and Data Scientists, neutralizes active attacks, gathers requirements for operational tooling, and leads incidents. The team works directly with impacted merchants to resolve technical incidents and policy abuse rapidly. Operating primarily across Eastern, Pacific and Western European time zones, these team members regularly coordinate with global stakeholders across the world.

What you’ll do

You’ll play a critical role in safeguarding our financial ecosystem by investigating high-risk accounts and identifying complex patterns of fraud during incidents. You will lead incident response for product abuse and fraud events, conducting deep-dive analyses to identify root causes. By collaborating cross-functionally, you will drive improvements that enhance our fraud detection and prevention strategies at scale. Your expertise will be essential in automating response processes through agentic approaches, allowing us to safeguard merchants and neutralize threats with speed and precision.

Responsibilities

• Investigate, mitigate, and remediate urgent fraud incidents (e.g., ATO, card testing), utilizing FT3-mapped detection and signals enrichment to reduce uncertainty and accelerate response.
• As part of incidents, analyze high-risk accounts to identify fraudulent merchants, card testing, account takeovers, and other fraud vectors, classifying them using FT3 (Fraud Taxonomy 3.0) to standardize threat intelligence.
• Lead incident root cause analyses to identify gaps in current systems and strategies, leveraging the FT3 framework, data-driven model to drive enhancements and process improvements for emerging fraud risks.
• Streamline incident response capabilities, ensuring the tooling and processes are clear, accurate and efficient.
• Work cross-functionally with security, fraud and data science teams to build agentic solutions for responding to abuse incidents at scale.
• Effectively communicate cross-functionally with legal and policy teams to assess and mitigate risks, while demonstrating strong problem-solving under pressure.
• Collaborate effectively with teammates, leading projects, mentoring others, and developing and championing quality standards within the team.

Who you are

We’re looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement.

Minimum requirements

• 10+ years of experience conducting incident response in security, product abuse or trust domains
• 10+ years experience analyzing large data sets to solve problems and/or building models with a behavioral approach to fraud detection
• B.S. or M.S. Computer Science or related field, or equivalent experience
• Expert knowledge of Python and SQL, and familiarity with other programming languages
• Existing experience with log analysis (e.g. first or third party applications, system / data access, event logs), network security, digital forensics, and incident response investigations
• Ability to communicate results clearly and focus on impact
• Ability to think creatively and holistically about reducing risk in a complex environment

Preferred qualifications

An adversarial