---
title: 'Staff Security Engineer, Abuse Control at Stripe'
canonical: 'https://feeny.ai/job/staff-security-engineer-abuse-control-stripe-london-tgvr85bfwewb'
type: 'job'
last_seen: '2026-10-18'
---

# Staff Security Engineer, Abuse Control at Stripe

- **Company:** Stripe
- **Location:** London, United Kingdom
- **Posted:** 2026-09-17
- **Last confirmed live:** 2026-10-18
- **Apply:** https://stripe.com/jobs/search?gh_jid=8211180

## Job description

## Who we are

## About Stripe

Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone’s reach while doing the most important work of your career.

## About the team

Abuse Control Engineering (ACE) is Stripe’s rapid-response technical defense and control incubator. When urgent abuse vectors emerge, ACE uses real-world attacker telemetry to prototype, test, and deploy software safeguards before vulnerabilities can be exploited at scale.

We partner closely with Fraud, Risk, Abuse Research, and Product Engineering to run rigorous experiments that balance effective risk mitigation with legitimate user activity and conversion. Operating as both a strike team and an incubator, ACE builds automated regression suites to prevent threats from recurring and transfers mature controls to long-term product owners across Stripe.

## What you’ll do

As an Abuse Control Engineer on the ACE team, you will design, prototype, and incubate technical defenses that safeguard Stripe’s financial ecosystem against complex, cross-cutting abuse vectors.

When emerging threat patterns reveal weaknesses in Stripe products, ACE rapidly builds and experiments with technical safeguards. Guided by empirical evidence and Stripe’s Fraud Taxonomy 3.0 (FT3) framework, you will translate threat intelligence into precise technical control requirements, such as API rate limits, step-up challenges, parameter validation, and pre-debit holds.

You will run experiments to evaluate risk reduction against the impact on legitimate user conversion, carefully balancing security and product velocity. You will manage controls through a structured incubation lifecycle, build automated regression suites to prevent threats from recurring, and partner with product engineering teams to transfer mature, long-term defenses.

## Responsibilities

- Rapid control prototyping: Design, prototype, and deploy technical controls across API, protocol, and product boundaries to address high-impact abuse vectors.
- Evidence-based technical requirements: Translate empirical attacker evidence and FT3 threat research from Abuse Research, Fraud, and Security teams into precise technical abuse requirements and control specifications.
- Control co-design: Collaborate with teams across Stripe to design resilient, secure controls across payments, onboarding, identity, and Connect surfaces.
- Risk experimentation: Run rigorous experiments and A/B tests to measure risk reduction against the impact on legitimate user conversion, optimizing controls to minimize friction while neutralizing threats.
- Regression testing: Build comprehensive regression test suites and automated attack simulations with Abuse Research to ensure mitigated abuse vectors do not recur.
- Stakeholder management: Execute ACE’s incubation model by defining handoff criteria, operational documentation, timelines, and target dates for transferring successful controls to product teams.

## Who you are

We’re looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement.

## Minimum requirements

- 10+ years of experience in security engineering, software engineering, application security, or anti-abuse engineering in a high-scale production environment.
- A bachelor’s or master’s degree in computer science, cybersecurity, software engineering, or a related technical field, or equivalent practical experience.
- A strong software development background, with proficiency in Python, Go, Java, or a similar production programming language, as well as advanced SQL skills for analyzing system telemetry.
- Experience using frontier AI models for software development, learning, and analysis.
- Hands-on experience building API-level safeguards, rate-limiting frameworks, authentication or authorization checks, or input-validation controls.
- Experience with automated testing frameworks, including writing unit, integration, and regression tests for critical backend software.
- Strong cross-functional collaboration and communication skills, with a track record of partnering across security, product, and platform teams to drive technical outcomes.

## Preferred qualifications

- A track record of designing and executing A/B tests, evaluating control efficacy, and balancing security safeguards against user conversion friction.
- Expertise in threat modeling, secure systems architecture, and modern application-security design principles.
- Familiarity with established threat frameworks, such as FT3 or MITRE ATT&CK, and experience applying adversary kill-chain analysis to build resilient defenses.
- Knowledge of financial fraud vectors, threat-actor tactics, techniques, and procedures, and attacker infrastructure, including account takeover, card testing, and credential stuffing.
- Hands-on experience with large-scale data-processing platforms, such as Databricks, Trino, or PySpark, to monitor and measure control performance across distributed systems.
- Experience incubating software features, establishing clear operational handoff criteria, and transitioning ownership to partner engineering teams.

## About Stripe

## Core Business
- Primary industry: Financial services / payments infrastructure
- Target customers: B2B – from startups to global enterprises (e.g., Le Monde, trucking companies)
- Mission: “Increase the GDP of the internet” by making online commerce easier and more accessible

## Products & Services
- **Stripe Payments**: Accept and optimise payments globally – online and in person; supports 135+ currencies and payment methods [stripe.com](https://stripe.com/)
- **Stripe Billing**: Manage subscriptions, invoices, and recurring revenue; over 200 million active subscriptions managed [stripe.com](https://stripe.com/)
- **Stripe Connect**: Embed payments into platforms and marketplaces
- **Stripe Atlas**: Incorporate a company, get everything needed to fundraise and start selling
- **Stripe Terminal**: In-person payments with customisable card readers
- **Stripe Issuing**: Create and manage a card issuing programme
- **Stripe Climate**: Automatically contribute a fraction of revenue to carbon removal

## Market Standing
- **Valuation/Market Cap**: Not publicly available (private company)
- **Key Metric**: $1.9 trillion in payments volume processed in 2025 [stripe.com](https://stripe.com/)
- **Notable Investors/Partners**: Not disclosed in provided sources
- **Growth Signals**:
  - Infrastructure underpins more than 1% of global GDP [stripe.com](https://stripe.com/jobs/life-at-stripe)
  - Over 8,000 employees across 25+ offices worldwide [stripe.com](https://stripe.com/jobs)
  - 99.999% historical uptime for Stripe services [stripe.com](https://stripe.com/)
  - Deploys 10,000+ times per day while maintaining five 9s of reliability [stripe.com](https://stripe.com/jobs/life-at-stripe)
  - 135+ currencies and payment methods supported [stripe.com](https://stripe.com/)

## Competitive Advantages
- **Scale & Reliability**: Processes massive transaction volumes with 99.999% uptime – a level of trust few competitors match.
- **Developer‑First Experience**: Obsessive focus on API design, documentation, and ease of integration; “start with a blank screen, work until a product is ready, polish until exceptional” [stripe.com](https://stripe.com/jobs/life-at-stripe).
- **Global Reach**: Supports 135+ currencies and payment methods, with local offices in 25+ cities to serve regional needs.
- **Network Effects**: The more businesses use Stripe, the more data and infrastructure advantages accrue, making it harder to switch.

## Strategic Focus
- **AI & Agentic Commerce**: Building economic infrastructure for AI, including monetisation through agentic commerce [stripe.com](https://stripe.com/).
- **Crypto & Stablecoins**: Enabling borderless money movement with stablecoins and crypto [stripe.com](https://stripe.com/).
- **Platform Expansion**: Continuing to add financial tools (billing, issuing, terminal, climate) that work individually or together.
- **Globalisation**: Deepening presence in markets like Japan, India, and Latin America.

## Why Work Here
- **Culture**: “Intense and kind” – high expectations paired with a supportive, transparent environment. Weekly all‑hands with senior leaders; decisions based on idea quality, not seniority [stripe.com](https://stripe.com/jobs/life-at-stripe).
- **Growth & Ownership**: “Promotions are tied to demonstrated impact, not tenure.” Employees get substantial responsibility early, often working outside their domain [stripe.com](https://stripe.com/jobs).
- **Work Model**: Hybrid/remote‑friendly – two main HQs (San Francisco & Dublin) plus 25+ offices, and many Stripes work from home or coworking spaces [stripe.com](https://stripe.com/jobs).
- **Benefits**: Comprehensive medical, mental health, financial advisory, family planning, and parental leave. Education team provides onboarding and ongoing expert‑led courses [stripe.com](https://stripe.com/en-gi/jobs/benefits).
- **Diversity & Inclusion**: Employee‑created resource groups (Stripe Communities), accommodations for disabilities, and a commitment to equal opportunity [stripe.com](https://stripe.com/jobs).

## Sources
1. [stripe.com/jobs/life-at-stripe](https://stripe.com/jobs/life-at-stripe)
2. [stripe.com/jobs](https://stripe.com/jobs)
3. [stripe.com/](https://stripe.com/)
4. [stripe.com/jobs/search](https://stripe.com/jobs/search)
5. [stripe.com/en-gi/jobs/benefits](https://stripe.com/en-gi/jobs/benefits)

## Other roles at Stripe

- [Project Manager, Total Rewards](https://feeny.ai/job/project-manager-total-rewards-stripe-chicago-nv7gy762wmgf) — Chicago, IL / Atlanta, GA
- [Indirect Tax Advisory Consultant](https://feeny.ai/job/indirect-tax-advisory-consultant-stripe-seattle-p1zmp05cqdsv) — Seattle, WA / San Francisco, CA / New York, NY
- [Solutions Engineer, AI Build Team](https://feeny.ai/job/solutions-engineer-ai-build-team-stripe-us-sf-us-nyc-wp7pbr4ke7wy) — Us-Sf Us-Nyc, United States
- [Account Executive, Product - Link: Bank Payments & Open Banking](https://feeny.ai/job/account-executive-product-link-bank-payments-open-banking-stripe-san-francisco-af52nwnz7sg0) — San Francisco, CA / Seattle, WA / Chicago, IL / New York, NY
- [Account Executive, Funded Startups DACH](https://feeny.ai/job/account-executive-funded-startups-dach-stripe-berlin-bq8ccw8cxwqk) — Berlin, Germany
- [Account Executive - Startup SaaS Platforms, Scaled UK Hunter](https://feeny.ai/job/account-executive-startup-saas-platforms-scaled-uk-hunter-stripe-dublin-4ke7stdt93ax) — Dublin, Ireland
- [Account Executive, Enterprise Grower (Benelux)](https://feeny.ai/job/account-executive-enterprise-grower-benelux-stripe-amsterdam-4mawh6x6791k) — Amsterdam, Netherlands
- [Team Lead, Managed Support](https://feeny.ai/job/team-lead-managed-support-stripe-mexico-city-8jg991gzagwk) — Mexico City, Mexico
- [Account Executive, SMB Commercial, Grower](https://feeny.ai/job/account-executive-smb-commercial-grower-stripe-dublin-74jj6eqd9ryn) — Dublin, Ireland
- [Partner Development Manager](https://feeny.ai/job/partner-development-manager-stripe-london-fxqqpmqr20dq) — London, United Kingdom