InvestigatorActive

The opportunity

Abuse Operations is the front-line incident response and remediation function handling active product abuse and fraud impacting Stripe and its merchants. This multi-disciplinary group, spanning Incident Managers, Investigators, Forward Deployed Security Engineers, and Data…

What you'll do

  • Investigate, mitigate, and remediate urgent fraud incidents (e.g., ATO, card: testing), utilizing FT3-mapped detection and signals enrichment to reduce uncertainty and accelerate response.

  • As part of incidents, analyze high-risk accounts to identify fraudulent: merchants, card testing, account takeovers, and other fraud vectors, classifying them using FT3 (Fraud Taxonomy 3.0) to standardize threat intelligence.

  • Lead incident root cause analyses to identify gaps in current systems and: strategies, leveraging the FT3 framework, data-driven model to drive enhancements and process improvements for emerging fraud risks.

  • Streamline incident response capabilities, ensuring the tooling and processes: are clear, accurate and efficient

  • Work cross-functionally with security, fraud and data science teams to build: agentic solutions for responding to abuse incidents at scale

  • Effectively communicate cross-functionally with legal and policy teams to: assess and mitigate risks, while demonstrating strong problem-solving under pressure.

What they're looking for

  • + years of experience conducting incident response in security, product abuse or trust domains
  • + years experience analyzing large data sets to solve problems and/or: building models with a behavioral approach to fraud detection
  • B.S. or M.S. Computer Science or related field, or equivalent experience
  • Expert knowledge of Python and SQL, and familiarity with other programming languages
  • Existing experience with log analysis (e.g. first or third party: applications, system / data access, event logs), network security, digital forensics, and incident response investigations
  • Ability to communicate results clearly and focus on impact
  • Ability to think creatively and holistically about reducing risk in a complex environment
  • An adversarial mindset, understanding the goals, behaviors, and TTPs of threat actors.