6 hours ago
Barcelona, SpainStaff+
Responsibilities
- Design, prototype, and deploy technical controls across API, protocol, and product boundaries to address high-impact abuse vectors.
- Translate attacker evidence and FT3 threat research into technical abuse requirements and control specifications.
- Co-design resilient controls across payments, onboarding, identity, and Connect surfaces.
- Run experiments and A/B tests to evaluate risk reduction and minimize legitimate-user conversion friction.
- Build automated regression test suites and attack simulations with Abuse Research.
- Define handoff criteria, operational documentation, timelines, and target dates for transferring mature controls to product teams.
Requirements
- 10+ years of experience in security engineering, software engineering, application security, or anti-abuse engineering in a high-scale production environment.
- Bachelor’s or master’s degree in computer science, cybersecurity, software engineering, or a related technical field, or equivalent practical experience.
- Proficiency in Python, Go, Java, or a similar production programming language, plus advanced SQL skills for analyzing system telemetry.
- Experience using frontier AI models for software development, learning, and analysis.
- Hands-on experience building API safeguards, rate-limiting frameworks, authentication or authorization checks, or input-validation controls.
- Experience writing unit, integration, and regression tests for critical backend software.
- Strong cross-functional collaboration and communication skills across security, product, and platform teams.
- Preferred experience includes A/B testing, threat modeling, secure systems architecture, FT3 or MITRE ATT&CK, adversary kill-chain analysis, financial fraud vectors, and attacker infrastructure.
- Experience with Databricks, Trino, or PySpark for monitoring and measuring control performance across distributed systems is preferred.
- Experience incubating software features, defining operational handoff criteria, and transitioning ownership to partner engineering teams is preferred.
About Stripe
Stripe builds financial infrastructure for internet businesses, offering APIs and tools for online and in‑person payments, subscriptions, marketplaces/payouts, fraud prevention, identity, tax, issuing, and treasury. It monetizes through per‑transaction fees and SaaS pricing for advanced products. Founded in 2010 and headquartered in South San Francisco, Stripe is privately held and serves companies from startups to large enterprises worldwide.