Abuse Research Engineer

About the role

The Abuse Research Group at Stripe proactively hunts for threats and analyzes adversary behavior to safeguard the financial ecosystem. As an Abuse Research Engineer, you will map end-to-end fraud paths, validate attack vectors, and identify product conditions that enable fraud. You will translate research into actionable threat advisories and strategic control recommendations to systematically eliminate vulnerabilities.

Responsibilities

• Formulate hypotheses and conduct iterative threat hunting operations across Stripe systems and external data.
• Apply and enrich the FT3 framework across empirical datasets and incidents, standardizing threat intelligence across kill chain phases and targeted API endpoints.
• Partner with teams like Fraud Intelligence to integrate, curate, and automate threat feeds into engineering workflows.
• Translate raw research and retrospective findings into actionable threat advisories and control recommendations for stakeholders across Fraud, Risk, Onboarding, and Security.
• Utilize agentic automated testing frameworks to simulate adversary TTPs, validate whether deployed controls interrupt empirical kill chains, and generate regression scenarios to exercise controls.

Required skills

• Threat hunting
• Threat intelligence
• Incident response
• Data analytics
• Python
• SQL
• Log analysis
• Digital forensics
• Cyber investigation

Nice to have

• Financial fraud analysis
• FT3
• MITRE ATT&CK
• Databricks
• Trino
• PySpark
• Pandas
• Scikit-Learn
• OSINT
• LLM tools

Qualifications

• B.S. or M.S. in Computer Science, Cybersecurity, or a related technical field
• Equivalent practical experience

About the Company

Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities.