132K–198K EUR / year
Staff Security Engineer, Abuse Control
BackendRemote — Spain, Europe
Published on 2026-11-05
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Design, prototype, and deploy technical defenses against emerging abuse across Stripe’s payments, onboarding, identity, and Connect products. Evaluate controls using attacker telemetry and experiments, balancing risk reduction with legitimate-user conversion, then build regression protections and hand mature controls to product teams.
About the company
Stripe provides payment infrastructure and financial tools that help businesses accept payments, manage subscriptions, and move money globally. It serves startups through large enterprises with APIs for online and in-person commerce.
The team
Abuse Control Engineering (ACE), within Security.
Stack
PythonGoJavaSQLDatabricksTrinoPySpark
What you'll do
- Prototype and deploy safeguards across API, protocol, and product boundaries.
- Translate attacker evidence and threat research into technical control requirements.
- Run experiments and A/B tests to measure risk reduction and user friction.
- Build regression test suites and automated attack simulations.
- Document handoff criteria and transition mature controls to product teams.
What we're looking for
- 10+ years in security, software, application security, or anti-abuse engineering in high-scale production environments.
- Proficiency in Python, Go, Java, or a similar production language, plus advanced SQL.
- Experience using frontier AI models for software development, learning, and analysis.
- Hands-on experience building API safeguards, rate limits, authentication or authorization checks, or input validation.
- Experience writing unit, integration, and regression tests for critical backend systems.
- Strong cross-functional collaboration and communication skills.
- Bachelor’s or master’s degree in a related technical field, or equivalent practical experience.
Nice to have
- Experience designing A/B tests and balancing security controls against user conversion.
- Threat modeling, secure architecture, and application-security expertise.
- Familiarity with FT3, MITRE ATT&CK, or adversary kill-chain analysis.
- Knowledge of financial fraud such as account takeover, card testing, and credential stuffing.
- Large-scale data processing experience with Databricks, Trino, or PySpark.
- Experience incubating features and transferring ownership to partner teams.
Benefits
- Equity
- Company bonus
- Retirement plans
- Health benefits
- Wellness stipends