Incident Response Manager - Abuse Operations

About Stripe

Stripe is a leading financial infrastructure platform that supports millions of companies worldwide, from startups to major enterprises, enabling seamless payment processing, revenue growth, and business acceleration. Our mission is to expand the internet economy globally, providing an extraordinary opportunity to contribute to a vital sector.

About the Abuse Operations Team

The Abuse Operations team is the primary incident response unit managing active product abuse and fraud affecting Stripe and its merchants. Comprising Incident Managers, Investigators, Security Engineers, and Data Scientists, this team neutralizes attacks, gathers requirements for operational tools, and leads incident management efforts. Operating primarily across European time zones, they coordinate with global stakeholders to resolve incidents and abuse swiftly.

Key Responsibilities

• Lead the end-to-end response to fraud and abuse incidents as Incident Response Manager, coordinating various workstreams, analyzing high-risk activities, and recommending actionable interventions during critical situations.
• Investigate and remediate urgent fraud incidents such as account takeovers and card testing, utilizing Fraud Taxonomy 3.0 (FT3) detection methods and signal enrichment techniques to increase response accuracy and speed.
• Analyze risky accounts to detect fraudulent merchants and abuse patterns, categorizing threats consistently using FT3 standards.
• Develop, document, and implement incident response strategies, runbooks, and capabilities focused on enhancing fraud and abuse detection and prevention.
• Collaborate with security, data science, legal, and policy teams to build automated response workflows, refine key performance indicators, and deliver precise incident reporting.
• Mentor team members and lead significant incident response engineering initiatives to raise the overall quality and effectiveness of the team.

Candidate Profile

• Minimum 10 years of experience leading security or fraud incident response teams.
• Bachelor’s or Master’s degree in Computer Science or equivalent professional experience.
• Expert proficiency in Python and SQL, with familiarity in other programming languages.
• Experience analyzing logs from various sources (applications, systems, event data), network security, digital forensics, and conducting incident investigations.
• Demonstrated ability to construct automated response processes, incorporate threat intelligence, and propose risk mitigation strategies.
• Strong communication skills, capable of driving cross-functional collaboration with minimal supervision.

Preferred Skills and Experience

• Comprehensive knowledge of fraud and abuse prevention, risk management, product trust, and threat intelligence in complex platform environments.
• Adversarial mindset to understand threat actors’ goals and techniques.
• Experience with engineering and data analysis tools such as Databricks and Trino.
• Familiarity with open-source big data frameworks like PySpark, Pandas, and Scikit-learn.
• Background in tactical threat intelligence and hunting advanced threat actors in enterprise settings.
• Proactive approach to challenge existing processes by leveraging data and focusing on user-centric solutions to complex product integrity issues.

Work Environment and Expectations

Employees assigned to this role in Dublin are expected to work fully onsite, spending 100% of their time in the office to support users and collaborate effectively. Office attendance requirements balance in-person interaction with flexibility depending on team and role.

Compensation and Benefits

The anticipated salary range for this position in Dublin is €89,100 to €133,700 annually. This range could vary based on location, experience, and other factors. Additional benefits may include equity options, bonuses, retirement plans, health coverage, and wellness stipends.

Additional Information

We encourage candidates with passion and integrity to apply even if their qualifications do not exactly match the job description. Diversity of experience and thinking is highly valued to help challenge assumptions and drive innovation at Stripe.