2 days ago
Dublin, IrelandMid Level
Responsibilities
- Design, prototype, and deploy technical controls across API, protocol, payment, onboarding, identity, and Connect surfaces.
- Translate attacker evidence and FT3 threat research into precise abuse requirements and control specifications.
- Build safeguards such as rate limiting, authentication and authorization checks, input validation, and other API-level defenses.
- Run experiments and A/B tests to measure risk reduction against user conversion impact.
- Build automated regression testing suites and attack simulations with Abuse Research.
- Define handoff criteria, operational documentation, and target dates for transferring mature controls to product engineering teams.
Requirements
- At least 3 years of experience in Security Engineering, Software Engineering, Application Security, or Anti-Abuse Engineering in a high-scale production environment.
- Bachelor’s or master’s degree in Computer Science, Cybersecurity, Software Engineering, or a related technical field, or equivalent practical experience.
- Expert proficiency in Python, Go, Java, or similar production languages and expert SQL skills for telemetry analysis.
- Hands-on experience building API-level safeguards, rate-limiting frameworks, authentication or authorization checks, or input validation controls.
- Experience with automated testing frameworks and unit, integration, and regression testing for critical backend software.
- Strong cross-functional collaboration and communication skills across security, product, and platform teams.
- Preferred qualifications include A/B testing, threat modeling, secure architecture, application security, FT3, MITRE ATT&CK, adversary kill-chain analysis, financial fraud, attacker TTPs, and large-scale data processing platforms such as Databricks, Trino, and PySpark.
- Experience incubating software features, defining operational handoffs, and transitioning ownership to partner engineering teams is preferred.
About Stripe
Stripe builds financial infrastructure for internet businesses, offering APIs and tools for online and in‑person payments, subscriptions, marketplaces/payouts, fraud prevention, identity, tax, issuing, and treasury. It monetizes through per‑transaction fees and SaaS pricing for advanced products. Founded in 2010 and headquartered in South San Francisco, Stripe is privately held and serves companies from startups to large enterprises worldwide.