5 hours ago
Remote, United StatesMid Level
H1B sponsor
Responsibilities
- Design, prototype, and deploy technical controls across API, protocol, and product boundaries to address high-impact abuse vectors.
- Translate attacker evidence, FT3 research, and security findings into technical abuse requirements and control specifications.
- Co-design resilient controls across payment, onboarding, identity, and Connect surfaces with cross-functional teams.
- Run experiments and A/B tests to evaluate risk reduction against legitimate user conversion impact.
- Build automated regression testing suites and attack simulations to prevent mitigated abuse vectors from recurring.
- Define handoff criteria, operational documentation, and target dates for transferring mature controls to product teams.
Requirements
- 3+ years of experience in Security Engineering, Software Engineering, Application Security, or Anti-Abuse Engineering in a high-scale production environment.
- B.S. or M.S. in Computer Science, Cybersecurity, Software Engineering, or a related technical field, or equivalent practical experience.
- Expert proficiency in Python, Go, Java, or similar production languages, along with expert SQL skills for analyzing system telemetry.
- Hands-on experience building API-level safeguards, rate-limiting frameworks, authentication and authorization checks, or input validation controls.
- Experience writing unit, integration, and regression tests for critical backend software using automated testing frameworks.
- Strong cross-functional collaboration and communication skills across security, product, and platform teams.
- Preferred qualifications include A/B testing, threat modeling, secure architecture, application security, FT3, MITRE ATT&CK, adversary kill-chain analysis, financial fraud vectors, and attacker infrastructure.
- Preferred experience includes large-scale data processing with Databricks, Trino, or PySpark and incubating software features through operational handoff.
About Stripe
Stripe builds financial infrastructure for internet businesses, offering APIs and tools for online and in‑person payments, subscriptions, marketplaces/payouts, fraud prevention, identity, tax, issuing, and treasury. It monetizes through per‑transaction fees and SaaS pricing for advanced products. Founded in 2010 and headquartered in South San Francisco, Stripe is privately held and serves companies from startups to large enterprises worldwide.