Proactive Fraud Threat Research Engineer

Socket.dev; United States; On-site; USD 180,000 - 240,000; Full time

Job summary

Stripe is seeking an Abuse Research Engineer to proactively hunt for advanced threats, dissect complex fraud vectors, and extract actionable adversary intelligence. You will develop hypothesis-driven threat hunting across internal telemetry and external sources to uncover TTPs before they impact Stripe’s platform.

Collaborate with Fraud Ops, Strategy, Risk, Onboarding, and Security to integrate threat intel and build agentic simulation workflows that systematically eliminate vulnerabilities.

Qualifications

• 5+ years in threat intelligence, threat hunting, or incident response in security domains.
• Experience analyzing large datasets to identify anomalies and fraud patterns.
• Advanced degree or practical experience in a related technical field.
• Expert proficiency in Python and SQL; automating workflows and data pipelines.
• Strong communication to translate research into actionable advisories.

Responsibilities

• Proactive threat hunting and kill chain analysis across Stripe systems and external data.
• Apply FT3 taxonomy to standardize threat intelligence across kill chains and API endpoints.
• Integrate threat feeds into engineering workflows with cross-functional partners.
• Translate findings into advisories and controls for Fraud, Risk, Onboarding, and Security.
• Use agentic testing and adversary simulation to validate controls and generate regression scenarios.

Skills

Threat hunting

Threat intelligence

Data analytics

Python

SQL

Education

B.S./M.S. in CS/Cybersecurity

Tools

Databricks

Trino

PySpark

Pandas

Scikit-Learn

Job description

Stripe is seeking an Abuse Research Engineer to proactively hunt for advanced threats, dissect complex fraud vectors, and extract actionable adversary intelligence. You will develop hypothesis-driven threat hunting across internal telemetry and external sources to uncover TTPs before they impact Stripe’s platform.

Collaborate with Fraud Ops, Strategy, Risk, Onboarding, and Security to integrate threat intel and build agentic simulation workflows that systematically eliminate vulnerabilities.