Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop, prototype, and implement technical controls across API, protocol, and product boundaries to mitigate significant abuse vectors.

• Convert attacker evidence and FT3 threat research into specific technical abuse requirements and control specifications.

• Collaborate in designing resilient, secure controls across payment, onboarding, identity, and Connect surfaces with Stripe teams.

• Conduct experiments and A/B tests to evaluate risk reduction against the impact on legitimate user conversion.

• Create regression testing suites and automated attack simulations in collaboration with Abuse Research.

• Establish handoff criteria, operational documentation, and target timelines to facilitate the transfer of successful controls to product teams.

⛳️ Requirements

• A minimum of 3 years of experience in Security Engineering, Software Engineering, Application Security, or Anti-Abuse Engineering within a high-scale production environment.

• A B.S. or M.S. in Computer Science, Cybersecurity, Software Engineering, or a related technical discipline, or equivalent practical experience.

• A robust software development background with expert proficiency in Python, Go, Java, or similar production languages, as well as expert SQL skills for analyzing system telemetry.

• Practical engineering experience in constructing API-level safeguards, rate-limiting frameworks, authentication/authorization checks, or input validation controls.

• Proven experience with automated testing frameworks, including the creation of unit, integration, and regression tests for critical backend software.

• Excellent cross-functional collaboration and communication skills, with a history of working across security, product, and platform teams to achieve technical objectives.

• Preferred: experience in designing and implementing A/B tests; threat modeling and secure system architecture; familiarity with FT3 or MITRE ATT&CK; understanding of financial fraud vectors and attacker infrastructure; Databricks, Trino, or PySpark; software feature incubation and operational transfers.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance.

• Generous vacation and paid time off policy.

• Opportunities for professional development and continued education.

• Flexible work environment and options for remote work.