Security Engineer, ACE

Stripe
Dublin
Workplace: OnsiteFull timeFunction: CybersecurityExperience: 3+ yearsEducation: mastersSkills: ["Cross-functional collaboration","Communication","Stakeholder management"]

Design, prototype, and incubate technical defenses to safeguard Stripe’s financial ecosystem against cross-cutting abuse vectors. Translate attacker evidence and FT3 threat research into concrete control requirements (e.g., API rate-limiting, step-up challenges, parameter validation, pre-debit holds). Run experiments and regression testing to measure risk reduction versus conversion impact, then hand off mature controls to product teams through ACE’s incubation lifecycle.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Stripe
Stripe
2 days ago

Security Engineer, ACE

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 6 hours agoStatus: Live

Job Summary

Design, prototype, and incubate technical defenses to safeguard Stripe’s financial ecosystem against cross-cutting abuse vectors. Translate attacker evidence and FT3 threat research into concrete control requirements (e.g., API rate-limiting, step-up challenges, parameter validation, pre-debit holds). Run experiments and regression testing to measure risk reduction versus conversion impact, then hand off mature controls to product teams through ACE’s incubation lifecycle.
Location: Dublin
Workplace: Onsite
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Design, prototype, and deploy technical controls across API, protocol, and product boundaries to close high-impact abuse vectors.
  • •Translate empirical attacker evidence and FT3 threat research into precise technical abuse requirements and control specifications.
  • •Co-design resilient controls with teams across payment, onboarding, identity, and Connect surfaces.
  • •Run rigorous risk experiments and A/B tests to measure risk reduction against legitimate user conversion impact and optimize for minimal friction.
  • •Build automated regression testing suites and manage ACE’s incubation lifecycle, including handoff criteria and operational documentation to transfer controls to product teams.

Key Requirements

  • •3+ years of experience in Security Engineering, Software Engineering, Application Security, or Anti-Abuse Engineering in a high-scale production environment.
  • •B.S. or M.S. in Computer Science, Cybersecurity, Software Engineering, or a related technical field, or equivalent practical experience.
  • •Strong software development background with expert proficiency in Python, Go, Java, or similar production languages, plus expert SQL skills for analyzing system telemetry.
  • •Hands-on experience building API-level safeguards, including rate-limiting frameworks, authentication/authorization checks, and input validation controls.
  • •Experience writing unit, integration, and regression tests for critical backend software, plus strong cross-functional collaboration.
Experience:3+ yearsSecurity engineeringApplication securityAnti-abuseFinancial fraud
Education:Master's in Computer Science, Cybersecurity, Software Engineering, or a related technical field
Skills:Cross-functional collaborationCommunicationStakeholder management
Languages:English
Tech Stack:PythonGoJavaSQLAPI rate-limitingAuthenticationAuthorizationInput validationUnit testingIntegration testingRegression testingA/B testingDatabricksTrinoPySparkFT3MITRE ATT&CK

Company Brief

Stripe
Provides payment processing APIs and financial infrastructure for internet businesses. Powers online payments for millions of companies from startups to Fortune 500s.
Industry: Payments
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Scaleup
Valuation: Decacorn (USD 10B+)
Funding: Series E+
Headquarters: San Francisco, United States
Founded: 2010
Glassdoor
Glassdoor: 4.2
WebsiteLinkedInGlassdoor