132K–198K EUR / year
Staff Security Engineer, Abuse Control
BackendRemote — Spain, Europe
Published on 2026-11-05
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Build and incubate technical safeguards against emerging abuse across Stripe’s financial products. Use attacker evidence and experiments to reduce abuse while minimizing friction for legitimate users, then transfer proven controls to product teams.
About the company
Stripe provides payment infrastructure and financial tools that help businesses accept payments, manage subscriptions, and move money globally. It serves startups through large enterprises with APIs for online and in-person commerce.
The team
Abuse Control Engineering (ACE), a rapid-response technical defense and control incubator.
Stack
PythonGoJavaSQLDatabricksTrinoPySpark
What you'll do
- Prototype and deploy abuse controls across APIs, protocols, and product surfaces.
- Translate threat intelligence and attacker telemetry into technical control requirements.
- Run experiments and A/B tests to measure risk reduction and conversion impact.
- Build regression tests and automated attack simulations.
- Document and hand off mature controls to product engineering teams.
What we're looking for
- 10+ years in security, software, application security, or anti-abuse engineering in a high-scale production environment.
- Degree in a related technical field or equivalent practical experience.
- Production programming experience in Python, Go, Java, or a similar language, plus advanced SQL.
- Experience using frontier AI models for development, learning, and analysis.
- Hands-on experience building API safeguards, rate limits, authentication or authorization checks, or input validation.
- Experience writing unit, integration, and regression tests for critical backend software.
- Strong cross-functional collaboration and communication skills.
Nice to have
- Experience designing A/B tests and balancing security controls with user conversion.
- Expertise in threat modeling and secure systems architecture.
- Familiarity with FT3, MITRE ATT&CK, or adversary kill-chain analysis.
- Knowledge of financial fraud, including account takeover, card testing, and credential stuffing.
- Experience with large-scale data processing platforms such as Databricks, Trino, or PySpark.
- Experience incubating features and transitioning ownership to partner teams.
Benefits
- Potential equity and company bonus; benefits vary by location.