Security Incident Response Manager, Abuse Operations
Core
Lead end-to-end fraud and abuse incident response, investigating high-risk accounts, mitigating active attacks, and driving cross-functional improvements to scale detection.
Role type
Senior IC Security Incident Response Manager (Fraud/Abuse)
Builds
Automated response workflows, incident runbooks, and threat intelligence capabilities for Stripe's financial ecosystem.
Domain
Financial services, fraud prevention, and security incident response.
Required skills
Incident response leadership, fraud investigation, threat intelligence, Python, SQL, log analysis, network security, digital forensics, risk mitigation, cross-functional alignment, automated workflow design.
Preferred skills
Fraud/abuse mitigation expertise, adversarial mindset, big data processing tools (Databricks, Trino), data science frameworks (PySpark, Pandas, Sci-kit Learn), tactical threat hunting.
Technologies
Python, SQL, Databricks, Trino, PySpark, Pandas, Sci-kit Learn, FT3 (Fraud Taxonomy 3.0).
Responsibilities
Coordinate workstreams and lead incident response as Incident Commander; investigate and remediate urgent fraud incidents (ATO, card testing); analyze high-risk accounts to identify fraud vectors; develop and execute incident response strategies and runbooks; partner with security, data science, legal, and policy teams to build agentic solutions; mentor teammates and lead engineering projects to elevate team standards.
Seniority
Senior, hands-on IC with leadership responsibilities.