Security Incident Response Manager, Abuse Operations
Core
Lead end-to-end fraud and abuse incident response, investigating high-risk accounts, mitigating active attacks, and driving cross-functional improvements to scale detection.
Role type
Senior IC Security Incident Response Manager (Fraud/Abuse)
Builds
Automated response workflows, incident runbooks, and threat intelligence capabilities for Stripe's financial ecosystem.
Domain
Financial services, fraud prevention, and security incident response.
Deliverable
production ML models | product features | dashboards & analysis | client delivery
Required skills
Incident response leadership, fraud investigation, threat intelligence, Python, SQL, log analysis, network security, digital forensics, risk mitigation, cross-functional alignment, automated workflow design.
Preferred skills
Fraud/abuse mitigation expertise, adversarial mindset, big data processing tools (Databricks, Trino), data science frameworks (PySpark, Pandas, Sci-kit Learn), tactical threat hunting.
Technologies
Python, SQL, Databricks, Trino, PySpark, Pandas, Sci-kit Learn, FT3 (Fraud Taxonomy 3.0).
Responsibilities
Coordinate workstreams and lead incident response as Incident Commander; investigate and remediate urgent fraud incidents (ATO, card testing); analyze high-risk accounts to identify fraud vectors; develop and execute incident response strategies and runbooks; partner with security, data science, legal, and policy teams to build agentic solutions; mentor teammates and lead engineering projects to elevate team standards.
Seniority
Senior, hands-on IC with leadership responsibilities.