Fraud & Abuse Incident Response Lead

Stripe; Atlanta (GA); Hybrid; USD 188,000 - 283,000; Full time

Benefits offered by this job

Equity

Company bonus

401(k) plan

Medical, dental, and vision benefits

Wellness stipends

Job summary

Stripe is seeking an experienced Incident Response Manager to safeguard the financial ecosystem by leading end-to-end response to high-risk activity. You will coordinate cross-functional teams, investigate complex fraud patterns, and drive improvements to automate and scale response workflows.

Requirements include 10+ years of security incident leadership, strong Python/SQL skills, and experience with log analysis, forensics, and threat intel.

Qualifications

• 10+ years of experience leading security or fraud incident response.
• BS/MS in Computer Science or equivalent experience.
• Expert knowledge of Python and SQL, plus other languages.
• Experience with log analysis, network security, forensics, and incident investigations.
• Ability to build automated response workflows and leverage threat intelligence.
• Strong written and verbal communication with cross-functional alignment.

Responsibilities

• Lead fraud and abuse incident response end-to-end as IRM, coordinating workstreams and making mitigation recommendations.
• Investigate urgent fraud incidents (ATO, card testing) using FT3 detection and signals enrichment.
• Analyze high-risk accounts to identify fraudulent merchants and other fraud vectors.
• Develop incident response strategies, playbooks, and capabilities to improve detection and prevention.
• Partner with security, data science, legal, and policy teams to refine KPIs and reporting.
• Mentor teammates and drive key incident response engineering projects.

Skills

Python

SQL

Log analysis

Network security

Digital forensics

Incident response investigations

Written and verbal communication

Threat intelligence

Education

B.S./M.S. in Computer Science or equivalent experience

Tools

Databricks

Trino

PySpark

Pandas

Sci-kit Learn

Job description

Stripe is seeking an experienced Incident Response Manager to safeguard the financial ecosystem by leading end-to-end response to high-risk activity. You will coordinate cross-functional teams, investigate complex fraud patterns, and drive improvements to automate and scale response workflows.

Requirements include 10+ years of security incident leadership, strong Python/SQL skills, and experience with log analysis, forensics, and threat intel.