Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Staff Security Engineer, Abuse Control role.
Rezi rewrites your resume against Stripe's job description. Free.
Tailor your resume to this Staff Security Engineer, Abuse Control role.
Rezi rewrites your resume against Stripe's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Staff Security Engineer, Abuse Control posting at Stripe — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Staff Security Engineer, Abuse Control posting at Stripe — free, in seconds.
About the Role
Abuse Control Engineering (ACE) is Stripe’s rapid-response technical defense and control incubator. When urgent abuse vectors emerge, ACE uses real-world attacker telemetry to prototype, test, and deploy software safeguards before vulnerabilities can be exploited at scale. We partner closely with Fraud, Risk, Abuse Research, and Product Engineering to run rigorous experiments that balance effective risk mitigation with legitimate user activity and conversion. Operating as both a strike team and an incubator, ACE builds automated regression suites to prevent threats from recurring and transfers mature controls to long-term product owners across Stripe.
Responsibilities
- Design, prototype, and deploy technical controls across API, protocol, and product boundaries to address high-impact abuse vectors.
- Translate empirical attacker evidence and FT3 threat research into precise technical abuse requirements and control specifications.
- Collaborate with teams across Stripe to design resilient, secure controls across payments, onboarding, identity, and Connect surfaces.
- Run rigorous experiments and A/B tests to measure risk reduction against the impact on legitimate user conversion, optimizing controls to minimize friction while neutralizing threats.
- Build comprehensive regression test suites and automated attack simulations to ensure mitigated abuse vectors do not recur.
- Define handoff criteria, operational documentation, timelines, and target dates for transferring successful controls to product teams.
Requirements
- 10+ years of experience in security engineering, software engineering, application security, or anti-abuse engineering in a high-scale production environment.
- A strong software development background, with proficiency in Python, Go, Java, or a similar production programming language, as well as advanced SQL skills for analyzing system telemetry.
- Experience using frontier AI models for software development, learning, and analysis.
- Hands-on experience building API-level safeguards, rate-limiting frameworks, authentication or authorization checks, or input-validation controls.
- Experience with automated testing frameworks, including writing unit, integration, and regression tests for critical backend software.
- Strong cross-functional collaboration and communication skills, with a track record of partnering across security, product, and platform teams to drive technical outcomes.
- A track record of designing and executing A/B tests, evaluating control efficacy, and balancing security safeguards against user conversion friction.
- Expertise in threat modeling, secure systems architecture, and modern application-security design principles.
- Familiarity with established threat frameworks, such as FT3 or MITRE ATT&CK, and experience applying adversary kill-chain analysis to build resilient defenses.
- Knowledge of financial fraud vectors, threat-actor tactics, techniques, and procedures, and attacker infrastructure, including account takeover, card testing, and credential stuffing.
- Hands-on experience with large-scale data-processing platforms, such as Databricks, Trino, or PySpark, to monitor and measure control performance across distributed systems.
- Experience incubating software features, establishing clear operational handoff criteria, and transitioning ownership to partner engineering teams.
Skills
- Python
- Go
- Java
- SQL
- API-level safeguards
- Rate-limiting frameworks
- Authentication checks
- Authorization checks
- Input-validation controls
- Automated testing frameworks
- Unit testing
- Integration testing
- Regression testing
- A/B testing
- Threat modeling
- Secure systems architecture
- Application-security design principles
- FT3
- MITRE ATT&CK
- Adversary kill-chain analysis
- Databricks
- Trino
- PySpark
Experience Level
- 10+ years of experience
Education Level
- Bachelor's or Master's degree in Computer Science, Cybersecurity, Software Engineering, or a related technical field, or equivalent practical experience.
About the Company
- Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone’s reach while doing the most important work of your career.