132K–198K EUR / year
Staff Security Engineer, Abuse Control
BackendRemote — Spain
Published on 2026-11-05
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Build and incubate technical safeguards to protect Stripe’s financial products from emerging abuse. Use attacker evidence and experiments to reduce risk while minimizing friction for legitimate users, then transition proven controls to product teams.
About the company
Stripe provides payment infrastructure and financial tools that help businesses accept payments, manage subscriptions, and move money globally. It serves startups through large enterprises with APIs for online and in-person commerce.
The team
Abuse Control Engineering (ACE), Stripe’s rapid-response technical defense and control incubator.
Stack
PythonGoJavaSQLDatabricksTrinoPySpark
What you'll do
- Prototype and deploy safeguards across APIs, protocols, and products.
- Translate threat research and attacker telemetry into technical control requirements.
- Co-design controls for payments, onboarding, identity, and Connect.
- Run experiments and A/B tests to measure risk reduction and conversion impact.
- Build regression tests and automated attack simulations.
- Document and transfer mature controls to product engineering teams.
What we're looking for
- 10+ years in security, software, application security, or anti-abuse engineering in a high-scale production environment.
- Bachelor’s or master’s degree in a relevant technical field, or equivalent practical experience.
- Production programming proficiency and advanced SQL skills.
- Experience using frontier AI models for development, learning, and analysis.
- Hands-on experience building API safeguards, rate limits, authentication or authorization checks, or input validation.
- Experience writing unit, integration, and regression tests for backend systems.
- Strong collaboration and communication across security, product, and platform teams.
Nice to have
- Experience designing A/B tests and balancing security controls against user conversion.
- Threat modeling and secure systems architecture expertise.
- Familiarity with FT3, MITRE ATT&CK, or adversary kill-chain analysis.
- Knowledge of financial fraud, including account takeover, card testing, and credential stuffing.
- Experience with large-scale data-processing platforms such as Databricks, Trino, or PySpark.
- Experience incubating features and transitioning ownership to partner teams.