Fraud & Abuse Incident Response Lead

Stripe; Seattle (WA); Hybrid; USD 188,000 - 283,000; Full time

Benefits offered by this job

Equity

401(k)

Medical, dental, and vision benefits

Wellness stipend

Hybrid work

Job summary

Stripe is seeking an experienced Incident Response Manager to safeguard the financial ecosystem by leading end-to-end fraud and abuse incident response. You will coordinate cross-functional teams, drive improvements and develop automated workflows.

This role emphasizes threat intelligence, rapid response, and scalable incident management across global time zones, with strong emphasis on collaboration and rigorous risk mitigation.

Qualifications

• 10+ years of experience leading security or fraud incident response.
• B.S./M.S. in Computer Science or equivalent experience.
• Expert knowledge of Python and SQL, and familiarity with other programming languages.

Responsibilities

• Lead fraud and abuse incident response end-to-end as Incident Response Manager (IRM).
• Investigate high-risk activity and accounts, escalating actionable mitigation recommendations.
• Analyze high-risk accounts to identify fraudulent merchants and vectors, standardizing threat intelligence.
• Develop, document, and execute incident response strategies, runbooks, and capabilities to improve detection and prevention.
• Partner cross-functionally with security, data science, legal, and policy teams to deliver clear incident reporting.
• Mentor teammates and lead incident response projects to elevate quality standards.

Skills

Incident response leadership

Python

SQL

Security analysis

Communication

Cross-functional collaboration

Mentoring

Threat intelligence

Automation workflows

FT3 framework

Education

Bachelor's or Master's in Computer Science

Tools

Databricks

Trino

PySpark

Pandas

Sci-kit Learn

Job description

Stripe is seeking an experienced Incident Response Manager to safeguard the financial ecosystem by leading end-to-end fraud and abuse incident response. You will coordinate cross-functional teams, drive improvements and develop automated workflows.

This role emphasizes threat intelligence, rapid response, and scalable incident management across global time zones, with strong emphasis on collaboration and rigorous risk mitigation.