Security Incident Response Manager, Abuse Operations

Stripe
Seattle, San Francisco, Chicago, Atlanta
Workplace: RemoteFull timeFunction: Solutions Engineering & Sales EngineeringEducation: mastersSkills: ["Written communication","Verbal communication","Cross-functional alignment","Risk mitigation recommendations","Mentoring"]

Lead end-to-end fraud and abuse incident response as incident commander for high-risk accounts and urgent threats such as ATO and card testing. Investigate incidents using FT3 taxonomy signals enrichment, build and execute runbooks and response strategies, and drive cross-functional improvements with Security, Data Science, Legal, and Policy. Pressure-test processes via gamedays and help automate workflows with agentic approaches to improve speed, precision, and detection quality.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Stripe
Stripe
2 days ago

Security Incident Response Manager, Abuse Operations

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 18 hours agoStatus: Live

Job Summary

Lead end-to-end fraud and abuse incident response as incident commander for high-risk accounts and urgent threats such as ATO and card testing. Investigate incidents using FT3 taxonomy signals enrichment, build and execute runbooks and response strategies, and drive cross-functional improvements with Security, Data Science, Legal, and Policy. Pressure-test processes via gamedays and help automate workflows with agentic approaches to improve speed, precision, and detection quality.
Location: Seattle, San Francisco, Chicago, Atlanta
Workplace: Remote
Employment Type: Full time
Job Function: Solutions Engineering & Sales Engineering
Seniority: Manager level

Key Responsibilities

  • •Lead fraud and abuse incident response end-to-end as Incident Response Manager (IRM), coordinating workstreams and recommending mitigations under pressure.
  • •Investigate, mitigate, and remediate urgent fraud incidents (e.g., ATO, card testing) using FT3-mapped detection and signals enrichment.
  • •Analyze high-risk accounts to identify fraudulent merchants, card testing, account takeovers, and other fraud vectors, classifying them using FT3.
  • •Develop, document, and execute incident response strategies and runbooks to improve fraud and abuse detection and prevention.
  • •Partner cross-functionally and mentor teammates; lead incident response engineering projects and elevate quality standards.

Key Requirements

  • •10+ years of experience leading security or fraud incident response.
  • •B.S./M.S. in Computer Science or equivalent experience.
  • •Expert knowledge of Python and SQL, plus familiarity with other programming languages.
  • •Experience with log analysis, network security, digital forensics, and incident response investigations.
  • •Proven ability to build automated response workflows, leverage threat intelligence, and make risk mitigation recommendations.
Experience:Fraud incident responseSecurity incident responseDigital forensicsThreat intelligenceFraud and abuse mitigation
Education:Master's in Computer Science
Skills:Written communicationVerbal communicationCross-functional alignmentRisk mitigation recommendationsMentoring
Languages:English
Tech Stack:PythonSQLDatabricksTrinoPySparkPandasSci-kit LearnFT3Fraud Taxonomy 3.0

Company Brief

Stripe
Provides payment processing APIs and financial infrastructure for internet businesses. Powers online payments for millions of companies from startups to Fortune 500s.
Industry: Payments
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Scaleup
Valuation: Decacorn (USD 10B+)
Funding: Series E+
Headquarters: San Francisco, United States
Founded: 2010
Glassdoor
Glassdoor: 4.2
WebsiteLinkedInGlassdoor