OverviewIn this role, you design and prototype technical defenses to protect Stripe's payments ecosystem from sophisticated abuse.

You'll work within ACE to translate threat intelligence into concrete controls, and you'll run experiments to balance security with user conversion.

You'll manage controls through an incubation lifecycle and collaborate with product engineering to transfer mature defenses.

This is a high-impact, cross-functional role at the intersection of security and product velocity, with a strong emphasis on empirical, data-driven decision making.

ResponsabilidadesRapid control prototyping across API, protocol, and product boundaries to counter high-impact abuse vectors

Translate attacker evidence and FT3 threat research into precise technical requirements and control specifications

Co-design resilient controls with Stripe teams across payments, onboarding, identity, and Connect surfaces

Conduct risk experimentation and A/B testing to measure security impact and user conversion

Build regression test suites and automated attack simulations to prevent recurring threats

Define handoff criteria,



documentation, timelines, and transfer plans to product teams for mature controls

Requisitos principales10+ years of experience in security engineering, software engineering, or anti-abuse in a high-scale environment

Bachelor's or Master's degree in CS, cybersecurity, software engineering, or related field, or equivalent practical experience

Proficiency in Python, Go, Java, or a similar language; advanced SQL for telemetry analysis

Experience building API-level safeguards, rate-limiting, authentication/authorization checks, or input validation

Experience with automated testing frameworks and writing unit/integration/regression tests

Strong cross-functional collaboration and communication skills

Strong collaboration across security, product, and platform teams

Effective stakeholder management

Clear technical storytelling and documentation

Python, Go, Java (or similar production language)

Advanced SQL

API safeguards and rate-limiting frameworks

📌 Staff Security Engineer, Abuse Control - Barcelona
🏢 Stripe
📍 Barcelona