stripe
Security Engineer
About this role
Join Stripe's Abuse Control Engineering team as a Security Engineer to design and deploy rapid-response technical defenses against complex financial abuse vectors. You'll translate threat intelligence into concrete controls, run experiments balancing security with user experience, and hand off mature defenses to product teams.
What you'll do
- Design and prototype technical controls (rate-limiting, authentication, validation) to close high-impact abuse vectors across APIs and products
- Translate attacker telemetry and threat research into precise technical requirements and control specifications
- Run A/B tests and experiments measuring risk reduction against legitimate user conversion impact
- Build automated regression testing suites and attack simulations to prevent abuse recurrence
- Collaborate with Fraud, Risk, Product, and Security teams to co-design resilient controls
- Define handoff criteria and operational documentation to transfer successful controls to long-term product owners
What they're looking for
- Security Engineering and abuse/fraud prevention
- Python, Go, Java, or similar production programming languages
- Advanced SQL for telemetry analysis and data investigation
- API-level safeguards and authentication/authorization design
- Automated testing frameworks (unit, integration, regression tests)
- Threat modeling and secure system architecture
- A/B testing and experimentation methodology
- Cross-functional communication and stakeholder management
Opens the official application on the employer’s site. No login required.
stripe
Stripe builds payment infrastructure and financial services platforms, offering APIs and tools that enable developers and businesses to process transactions, detect fraud, verify identity, and manage security at scale. The company is hiring Backend Engineers, Full Stack Engineers, ML Engineers, AI Engineers, and Security Engineers to develop core platform systems, payment intelligence, customer support infrastructure, and security data platforms.
- Website
- stripe.com
Likely interview questions
- Tell us about a time you designed an API-level security control in production—how did you balance security rigor with deployment speed?
- Describe your experience building and maintaining automated regression test suites for critical backend systems. How did you prevent similar vulnerabilities from recurring?