Staff Security Engineer, Abuse Control

Stripe·Londonsenior

In short

→Ingeniero de seguridad especializado en detectar y frenar abusos técnicos en tiempo real, usando pruebas experimentales.
→Diseñas y pruebas controles técnicos rápidos (como límites de tasa o desafíos) para proteger plataformas ante amenazas emergentes.
→El punto destacado: trabajas como un equipo de respuesta rápida que transforma datos de abuso en defensas automáticas que luego se transfieren a equipos de prod

Required: fluency in English for collaboration across global teams.

In ~1 minute you get: who interviews you, the likely questions answered from your CV, and your CV tailored to this job. Free, no card.

🎧Land the interview? Bring the copilot. Our free extension listens to the live interview and flashes 3-4-word anchors from your resume and prep — glance, connect, talk. Get the extension →

What they ask for

✓10+ años de experiencia en seguridad o ingeniería de software
✓Habilidad para prototipar y desplegar controles técnicos rápidamente
✓Experiencia en análisis de datos de abuso y traducción a requerimientos técnicos
✓Capacidad para realizar experimentos controlados (A/B) con métricas de riesgo y conversión
✓Colaboración con equipos de fraude, riesgo y producto
✓Conocimiento del marco FT3 (Fraud Taxonomy 3.0) o experiencia similar en taxonomías de amenazas

Don't tick every box? That's normal — your free dossier shows your gaps and how to cover them in the interview.

APIprotocolosproductoslenguajes de programaciónpruebas experimentalesA/B testscontrol de versionesregresiónsimulaciones de ataquedocumentación operativa

Who should you write to at Stripe?

Your free dossier identifies the people who'd interview you — their background, what they value, and how to reach out so you stand out before applying.

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone’s reach while doing the most important work of your career. About the team Abuse Control Engineering (ACE) is Stripe’s rapid-response technical defense and control incubator. When urgent abuse vectors emerge, ACE uses real-world attacker telemetry to prototype, test, and deploy software safeguards before vulnerabilities can be exploited at scale. We partner closely with Fraud, Risk, Abuse Research, and Product Engineering to run rigorous experiments that balance effective risk mitigation with legitimate user activity and conversion. Operating as both a strike team and an incubator, ACE builds automated regression suites to prevent threats from recurring and transfers mature controls to long-term product owners across Stripe. What you’ll do As an Abuse Control Engineer on the ACE team, you will design, prototype, and incubate technical defenses that safeguard Stripe’s financial ecosystem against complex, cross-cutting abuse vectors. When emerging threat patterns reveal weaknesses in Stripe products, ACE rapidly builds and experiments with technical safeguards. Guided by empirical evidence and Stripe’s Fraud Taxonomy 3.0 (FT3) framework, you will translate threat intelligence into precise technical control requirements, such as API rate limits, step-up challenges, parameter validation, and pre-debit holds. You will run experiments to evaluate risk reduction against the impact on legitimate user conversion, carefully balancing security and product velocity. You will manage controls through a structured incubation lifecycle, build automated regression suites to prevent threats from recurring, and partner with product engineering teams to transfer mature, long-term defenses. Responsibilities • Rapid control prototyping: Design, prototype, and deploy technical controls across API, protocol, and product boundaries to address high-impact abuse vectors. • Evidence-based technical requirements: Translate empirical attacker evidence and FT3 threat research from Abuse Research, Fraud, and Security teams into precise technical abuse requirements and control specifications. • Control co-design: Collaborate with teams across Stripe to design resilient, secure controls across payments, onboarding, identity, and Connect surfaces. • Risk experimentation: Run rigorous experiments and A/B tests to measure risk reduction against the impact on legitimate user conversion, optimizing controls to minimize friction while neutralizing threats. • Regression testing: Build comprehensive regression test suites and automated attack simulations with Abuse Research to ensure mitigated abuse vectors do not recur. • Stakeholder management: Execute ACE’s incubation model by defining handoff criteria, operational documentation, timelines, and target dates for transferring successful controls to product teams. Who you are We’re looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement. Minimum requirements • 10+ years of experience i

Looking for something similar?

Leave your email and we'll alert you when matching jobs appear.

Don't apply unprepared

We research who's interviewing you, tailor your CV and rehearse you live — first one free.