Security Incident Response Manager, Abuse Operations

Stripe · Seattle, SF, NYC, Chicago, Atlanta, Remote in the USRemotesenior

In short

▸Líder en respuesta a incidentes de fraude y abuso en tiempo real para proteger la plataforma de Stripe.
▸Trabajas con datos, tecnología y equipos globales para investigar casos complejos y mejorar procesos de seguridad.
▸Destacado: lideras incidentes como comandante y desarrollas soluciones autónomas (agentic) para mitigar amenazas.

Fluent English required for coordination across global teams.

In ~1 minute you get: who interviews you, the likely questions answered from your CV, and your CV tailored to this job. Free, no card.

🎧Land the interview? Bring the copilot. Our free extension listens to the live interview and flashes 3-4-word anchors from your resume and prep — glance, connect, talk. Get the extension →

What they ask for

✓10+ años liderando respuesta a incidentes de seguridad o fraude.
✓Título de grado en Ciencias de la Computación o experiencia equivalente.
✓Conocimiento experto en Python y SQL.
✓Experiencia en análisis de cuentas de alto riesgo y fraudes como ATO o pruebas de tarjetas.
✓Capacidad de coordinar múltiples equipos durante incidentes críticos.
✓Habilidad para mejorar procesos de respuesta mediante documentación y automatización.

Don't tick every box? That's normal — your free dossier shows your gaps and how to cover them in the interview.

PythonSQLFT3 (Fraud Taxonomy 3.0)Agentic approachesRunbooksKPIsData ScienceSecurityLegalPolicy

Who should you write to at Stripe?

Your free dossier identifies the people who'd interview you — their background, what they value, and how to reach out so you stand out before applying.

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world’s largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career. About the team Abuse Operations is the front-line incident response and remediation function handling active product abuse and fraud impacting Stripe and its merchants. This multi-disciplinary group, spanning Incident Managers, Investigators, Forward Deployed Security Engineers, and Data Scientists, neutralizes active attacks, gathers requirements for operational tooling, and leads incidents. The team works directly with impacted merchants to resolve incidents and policy abuse rapidly. Operating primarily across Eastern, Pacific and Western European time zones, these team members regularly coordinate with global stakeholders across the world. What you’ll do In this role, you will play a critical part in safeguarding our financial ecosystem by investigating high-risk accounts, identifying complex fraud patterns, performing post-incident analyses, and driving cross-functional improvements to scale fraud detection. Building on these core operational duties, you will leverage your fraud, abuse, or product trust experience to improve incident response capabilities across Stripe by managing the entire fraud and abuse incident response process, developing response plans, leading workstreams, and serving as incident commander to ensure timely resolution. Furthermore, you will conduct gamedays to pressure-test response processes, drive proactive improvements, and help automate response workflows using agentic approaches ensuring we neutralize threats with speed and precision while continuously elevating Stripe's fraud and abuse incident response function. Responsibilities • Lead fraud and abuse incident response end-to-end as Incident Response Manager (IRM), coordinating workstreams, investigating high risk activity and accounts, and making actionable mitigation recommendations under pressure. • Investigate, mitigate, and remediate urgent fraud incidents (e.g., ATO, card testing), utilizing FT3-mapped (Fraud Taxonomy 3.0) detection and signals enrichment to reduce uncertainty and accelerate response. • As part of incidents, analyze high-risk accounts to identify fraudulent merchants, card testing, account takeovers, and other fraud vectors, classifying them using FT3 to standardize threat intelligence. • Develop, document, and execute incident response strategies, runbooks, and capabilities to continuously improve fraud and abuse detection and prevention. • Partner cross-functionally with security, data science, legal, and policy teams to build agentic response solutions, refine KPIs, and deliver clear incident reporting. • Mentor teammates, lead key incident response engineering projects, and elevate quality standards across the team. Who you are We're looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement. Minimum requirements • 10+ years of experience leading security or fraud incident response; • B.S./M.S. in Computer Science or equivalent experience. • Expert knowledge of Python and SQL, and familiar

Don't apply unprepared

We research who's interviewing you, tailor your CV and rehearse you live — first one free.