Staff Security Engineer, Abuse Control

As an Abuse Control Engineer on ACE, you design and prototype technical defenses to safeguard Stripe’s financial ecosystem from complex abuse. You translate threat intel into concrete controls and run experiments to balance risk reduction with user experience. You work with product and security teams to incubate and transfer mature defenses into long-term products. This role offers impact at scale within a mission-driven, cross-functional security incubator.

• Rapid control prototyping across API, protocol, and product boundaries to curb high-impact abuse
• Translate threat intel and FT3-derived requirements into precise control specifications
• Collaborate with Stripe teams to co-design secure, resilient controls across payments, onboarding, identity, and Connect
• Conduct risk-focused experiments and A/B tests to optimize security without harming user conversion
• Build regression test suites and automated attack simulations to prevent recurring threats
• Define handoff criteria and timelines to transfer successful controls to product teams

• 10+ years of experience in security engineering, software engineering, application security, or anti-abuse engineering in a high-scale production environment
• Strong software development background with Python, Go, Java or similar and advanced SQL skills
• Experience building API safeguards, rate-limiting, authentication/authorization checks, or input-validation controls
• Experience with automated testing frameworks including unit, integration, and regression tests for backend software
• Excellent cross-functional collaboration and communication skills across security, product, and platform teams

• cross-functional collaboration
• strong communication
• problem-solving
• Python
• Go
• Java or equivalent production language