5 hours ago
Bucharest, RomaniaStaff+
Responsibilities
- Design, prototype, and deploy technical controls across API, protocol, and product boundaries to address high-impact abuse vectors.
- Translate attacker evidence and threat research into precise technical requirements and control specifications.
- Collaborate across security, fraud, risk, abuse research, product, and platform teams to design controls for payments, onboarding, identity, and Connect.
- Run experiments and A/B tests to evaluate risk reduction while minimizing legitimate-user conversion friction.
- Build automated regression test suites and attack simulations to prevent recurring abuse.
- Define handoff criteria, operational documentation, timelines, and target dates for transferring mature controls to product engineering teams.
Requirements
- 10+ years of experience in security engineering, software engineering, application security, or anti-abuse engineering in a high-scale production environment.
- Bachelor’s or master’s degree in computer science, cybersecurity, software engineering, or a related technical field, or equivalent practical experience.
- Strong software development background with proficiency in Python, Go, Java, or a similar production programming language.
- Advanced SQL skills for analyzing system telemetry.
- Experience using frontier AI models for software development, learning, and analysis.
- Hands-on experience building API safeguards, rate-limiting frameworks, authentication or authorization checks, or input-validation controls.
- Experience writing unit, integration, and regression tests for critical backend software.
- Experience with A/B testing, threat modeling, secure systems architecture, application security, financial fraud vectors, or adversary analysis is preferred.
- Experience with large-scale data-processing platforms such as Databricks, Trino, or PySpark is preferred.
- Experience incubating software features and transitioning ownership to partner engineering teams is preferred.
About Stripe
Stripe builds financial infrastructure for internet businesses, offering APIs and tools for online and in‑person payments, subscriptions, marketplaces/payouts, fraud prevention, identity, tax, issuing, and treasury. It monetizes through per‑transaction fees and SaaS pricing for advanced products. Founded in 2010 and headquartered in South San Francisco, Stripe is privately held and serves companies from startups to large enterprises worldwide.