{"id":491251,"url":"https://alion.io/job/stripe-forward-deployed-security-engineer","title":"Forward Deployed Security Engineer","company":{"id":64,"name":"Stripe","domain":"stripe.com","url":"https://alion.io/company/stripe","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":77,"open_postings":131,"ghost_share":0.038,"stale_share":0.58,"repost_share":0.061,"time_to_fill_p50_days":63,"computed_at":"2026-11-04T06:34:25Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Dublin, Ireland"],"countries":["IE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":127000,"max_usd":304000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":724},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Databricks","optional":true},{"name":"Pandas","optional":true},{"name":"pySpark","optional":true},{"name":"Python","optional":true},{"name":"Spark","optional":true},{"name":"SQL","optional":true},{"name":"Trino","optional":true}],"status":"live","first_seen_at":"2026-09-06T15:22:28Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-11-04T08:34:34Z","board_verified":true,"closed_at":null,"days_open":58,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":58},"description":"Who we are\nAbout Stripe\nStripe is a financial infrastructure platform for businesses. Millions of companies - from the world’s largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career.\nAbout the team\nAbuse Operations is the front-line incident response and remediation function handling active product abuse and fraud impacting Stripe and its merchants. This multi-disciplinary group, spanning Incident Managers, Investigators, Forward Deployed Security Engineers, and Data Scientists, neutralizes active attacks, gathers requirements for operational tooling, and leads incidents. The team works directly with impacted merchants to resolve incidents and policy abuse rapidly. Operating primarily across Eastern, Pacific and Western European time zones, these team members regularly coordinate with global stakeholders across the world.\nWhat you’ll do\nIn this role, you will play a critical part in safeguarding our financial ecosystem through two main pillars: actively responding to live fraud and abuse incidents as a hands-on security engineer, and serving as a key bridge between incidents and merchants to help them remediate threats, improve security posture, and protect their accounts. Leveraging your technical depth in fraud, abuse, and security engineering, you will investigate high-risk accounts, perform post-incident analyses, gather operational requirements, and drive agentic response capabilities ensuring we neutralize threats with speed and precision while elevating Stripe's product integrity function.\nResponsibilities\nRespond to live fraud and abuse incidents as a Forward Deployed Security Engineer, investigating high-risk activity, neutralizing active attacks, and mitigating security risks across the ecosystem.\nInvestigate, mitigate, and remediate urgent fraud incidents (e.g., ATO, card testing), utilizing FT3-mapped (Fraud Taxonomy 3.0) detection and signals enrichment to reduce uncertainty and accelerate response.\nAs part of incidents, analyze high-risk accounts to identify fraudulent merchants, card testing, account takeovers, and other fraud vectors, classifying them using FT3 to standardize threat intelligence.\nDevelop, document, and execute incident response strategies, runbooks, and capabilities to continuously improve fraud and abuse detection and prevention.\nAct as a dedicated technical bridge during and after incidents to work directly with impacted merchants and customers, helping them investigate root causes, remediate vulnerabilities, and secure their accounts.\nServe as an operational and technical liaison for legal teams, policy partners, and threat intelligence communities.\nBuild and nurture strong strategic relationships across external threat intelligence communities, peer working groups, and law enforcement agencies.\nWho you are\nWe're looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement.\nMinimum requirements\n10+ years of experience leading security or fraud incident response; \nB.S./M.S. in Computer Science or equivalent experience.\nExpert knowledge of Python and SQL, and familiarity with other programming languages\nExisting experience with log analysis (e.g. first or third party applications, system / data access, event logs), network security, digital forensics, and incident response investigations\nProven ability to build automated response workflows, leverage threat intelligence, and make risk mitigation recommendations.\nStrong written and verbal communication skills with a track record of driving cross-functional alignment with minimal oversight.\nPrevious work with law enforcement\nEngagement in threat intelligence sharing communities\nPreferred qualifications\nBroad expertise across fraud and abuse mitigation, risk management, product trust, and threat intelligence in a complex platform environment.\nAn adversarial mindset, understanding the goals, behaviors, and TTPs of threat actors.\nExperience with engineering, data processing and analysis tools (e.g. Databricks, Trino, etc.)\nFamiliarity with common open-source frameworks for big data processing and/or data science (PySpark, Pandas, Sci-kit Learn, etc.)\nExperience with tactical threat intelligence and/or hunting for sophisticated threat actors in an enterprise environment\nAbility to proactively challenge the status quo by leveraging data and taking a user-centric approach to address complex product integrity challenges.\nSpeaker or participant in external conferences or similar industry engagements","description_format":"text","description_chars":4941,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":10,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Payment Processing & Gateways"],"lifecycle":[{"event":"open","at":"2026-09-07T01:03:33Z"}],"visa":[],"liveness":{"score":36,"band":"fade","label":"Fading","p_open":1,"p_active":0.597,"p_room":0.6,"age_days":58,"expected_fill_days":63,"reasons":["conf:2","stale_co","velocity","win:late","crowd:brand"],"computed_at":"2026-11-04T06:34:25Z"},"pay":null,"html_url":"https://alion.io/job/stripe-forward-deployed-security-engineer","json_url":"https://alion.io/job/stripe-forward-deployed-security-engineer.json","meta":{"generated_at":"2026-11-04T10:56:41Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16249,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":64},"rest":"https://alion.io/mcp/rest/get_company?id=64"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fstripe-forward-deployed-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fstripe-forward-deployed-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fstripe-forward-deployed-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/stripe-forward-deployed-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fstripe-forward-deployed-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":491251}},{"tool":"search_jobs","arguments":{"company":"stripe.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":491251},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}