Security Engineer

Stripe
United States
Workplace: RemoteFull timeFunction: CybersecurityExperience: 3+ yearsEducation: bachelorsSkills: ["Cross-functional collaboration","Communication","Risk experimentation","Evidence-based decision making","Security/product balance"]

Design, prototype, and incubate technical defenses for Stripe’s Abuse Control Engineering (ACE) team. Translate attacker evidence and FT3 threat research into API-level safeguards such as rate limiting, step-up challenges, parameter validation, and pre-debit holds. Run risk experiments and A/B tests to balance security outcomes with user conversion, build regression suites and attack simulations, and hand off mature controls to long-term product engineering teams.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Stripe
Stripe
2 days ago

Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 3 hours agoStatus: Live
Reposted: similar role first listed 3 months ago

Job Summary

Design, prototype, and incubate technical defenses for Stripe’s Abuse Control Engineering (ACE) team. Translate attacker evidence and FT3 threat research into API-level safeguards such as rate limiting, step-up challenges, parameter validation, and pre-debit holds. Run risk experiments and A/B tests to balance security outcomes with user conversion, build regression suites and attack simulations, and hand off mature controls to long-term product engineering teams.
Location: United States
Workplace: Remote
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Design, prototype, and deploy technical controls across API, protocol, and product boundaries to close high-impact abuse vectors.
  • •Translate empirical attacker evidence and FT3 threat research into precise technical abuse requirements and control specifications.
  • •Co-design resilient controls with teams across payment, onboarding, identity, and Connect surfaces.
  • •Run rigorous experiments and A/B tests to measure risk reduction versus legitimate user conversion impact, minimizing friction while neutralizing threats.
  • •Build regression testing suites and automated attack simulations with Abuse Research, then manage handoffs to long-term product teams via incubation lifecycle documentation and criteria.

Key Requirements

  • •3+ years of experience in Security Engineering, Software Engineering, Application Security, or Anti-Abuse Engineering in a high-scale production environment.
  • •B.S. or M.S. in Computer Science, Cybersecurity, Software Engineering, or a related technical field (or equivalent practical experience).
  • •Strong software development with expert proficiency in Python, Go, Java, or similar production languages, plus expert SQL for analyzing system telemetry.
  • •Hands-on experience building API-level safeguards such as rate-limiting frameworks, authentication/authorization checks, or input validation controls.
  • •Experience writing automated testing frameworks (unit, integration, and regression tests) for critical backend software.
Experience:3+ yearsFinancial fraudFraud preventionPaymentsAbuse controlHigh-scale production
Education:Bachelor's in Computer Science, Cybersecurity, Software Engineering, or related technical field
Skills:Cross-functional collaborationCommunicationRisk experimentationEvidence-based decision makingSecurity/product balance
Languages:English
Tech Stack:PythonGoJavaSQLAPIRate-limitingAuthenticationAuthorizationInput validationA/B testingUnit testingIntegration testingRegression testingRegression suitesDatabricksTrinoPySparkFT3MITRE ATT&CKThreat modeling

Company Brief

Stripe
Provides payment processing APIs and financial infrastructure for internet businesses. Powers online payments for millions of companies from startups to Fortune 500s.
Industry: Payments
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Scaleup
Valuation: Decacorn (USD 10B+)
Funding: Series E+
Headquarters: San Francisco, United States
Founded: 2010
Glassdoor
Glassdoor: 4.2
WebsiteLinkedInGlassdoor