调查员
Investigator
我们是谁
关于 Stripe
Stripe 是一家面向企业的金融基础设施平台。数以百万计的公司——从全球最大的企业到最具雄心的初创公司——都使用 Stripe 来接受支付、增长收入并加速新的商业机会。我们的使命是提升互联网的 GDP，而我们面前还有大量工作要做。这意味着你有机会在职业生涯中从事最重要的工作，同时让全球经济触手可及。
关于团队
欺诈运营团队是处理直接影响 Stripe 及其商户的产品滥用和欺诈事件的一线应急响应和补救职能。这个跨学科团队包括事件经理、调查员、前移安全工程师和数据科学家，他们中和主动攻击，收集操作工具需求，并领导事件。该团队直接与受影响的商户合作，快速解决技术事件和政策滥用。该团队主要分布在东欧、太平洋和西欧时区，这些成员经常与全球利益相关者协调沟通。
你将负责
你将在保护我们的金融生态系统方面发挥关键作用，通过调查高风险账户并在事件中识别复杂的欺诈模式。你将领导产品滥用和欺诈事件的应急响应，进行深入分析以确定根本原因。通过跨职能协作，你将推动改进，从而在规模上增强我们的欺诈检测和预防策略。你的专业知识对于通过代理方法自动化响应流程至关重要，使我们能够快速且精准地保护商户并中和威胁。
职责
- 调查、缓解和修复紧急欺诈事件（例如 ATO、卡测试），利用 FT3 映射的检测和信号增强来减少不确定性并加快响应。
- 作为事件的一部分，分析高风险账户以识别欺诈商户、卡测试、账户劫持和其他欺诈途径，使用 FT3（欺诈分类 3.0）进行分类，以标准化威胁情报。
- 领导事件根本原因分析，识别当前系统和策略中的漏洞，利用 FT3 框架和数据驱动模型推动针对新兴欺诈风险的改进和流程优化。
- 优化事件响应能力，确保
查看英文原文
Who we are
About Stripe
Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone’s reach while doing the most important work of your career.
About the team
Abuse Operations is the front-line incident response and remediation function handling active product abuse and fraud impacting Stripe and its merchants. This multi-disciplinary group, spanning Incident Managers, Investigators, Forward Deployed Security Engineers, and Data Scientists, neutralizes active attacks, gathers requirements for operational tooling, and leads incidents. The team works directly with impacted merchants to resolve technical incidents and policy abuse rapidly. Operating primarily across Eastern, Pacific and Western European time zones, these team members regularly coordinate with global stakeholders across the world.
What you’ll do
You'll play a critical role in safeguarding our financial ecosystem by investigating high-risk accounts and identifying complex patterns of fraud during incidents. You will lead incident response for product abuse and fraud events, conducting deep-dive analyses to identify root causes. By collaborating cross-functionally, you will drive improvements that enhance our fraud detection and prevention strategies at scale. Your expertise will be essential in automating response processes through agentic approaches, allowing us to safeguard merchants and neutralize threats with speed and precision.
Responsibilities
- Investigate, mitigate, and remediate urgent fraud incidents (e.g., ATO, card testing), utilizing FT3-mapped detection and signals enrichment to reduce uncertainty and accelerate response.
- As part of incidents, analyze high-risk accounts to identify fraudulent merchants, card testing, account takeovers, and other fraud vectors, classifying them using FT3 (Fraud Taxonomy 3.0) to standardize threat intelligence.
- Lead incident root cause analyses to identify gaps in current systems and strategies, leveraging the FT3 framework, data-driven model to drive enhancements and process improvements for emerging fraud risks.
- Streamline incident response capabilities, ensuring the tooling and processes are clear, accurate and efficient
- Work cross-functionally with security, fraud and data science teams to build agentic solutions for responding to abuse incidents at scale
- Effectively communicate cross-functionally with legal and policy teams to assess and mitigate risks, while demonstrating strong problem-solving under pressure.
- Collaborate effectively with teammates, leading projects, mentoring others, and developing and championing quality standards within the team
Who you are
We’re looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement.
Minimum requirements
- 3+ years of experience conducting incident response in security, product abuse or trust domains
- 3+ years experience analyzing large data sets to solve problems and/or building models with a behavioral approach to fraud detection
- B.S. or M.S. Computer Science or related field, or equivalent experience
- Expert knowledge of Python and SQL, and familiarity with other programming languages
- Existing experience with log analysis (e.g. first or third party applications, system / data access, event logs), network security, digital forensics, and incident response investigations
- Ability to communicate results clearly and focus on impact
- Ability to think creatively and holistically about reducing risk in a complex environment
Preferred qualifications
·
- An adversarial mindset, understanding the goals, behaviors, and TTPs of threat actors.
- Experience with engineering, data processing and analysis tools (e.g. Databricks, Trino, etc.)
- Familiarity with common open-source frameworks for big data processing and/or data science (PySpark, Pandas, Sci-kit Learn, etc.)
- Experience with tactical threat intelligence and/or hunting for sophisticated threat actors in an enterprise environment
- Ability to proactively challenge the status quo by leveraging data and taking a user-centric approach to address complex product integrity challenges