Abuse Research Engineer

What you'll do

• Formulate hypotheses and conduct iterative threat hunting operations across internal systems and external data.
• Apply and enrich the FT3 framework to standardize threat intelligence across kill chain phases and API endpoints.
• Integrate, curate, and automate threat feeds into engineering workflows in partnership with Fraud Intelligence.
• Translate research findings into actionable threat advisories and control recommendations for Fraud, Risk, and Security teams.
• Use agentic automated testing frameworks to simulate adversary TTPs and validate the effectiveness of deployed controls.
• Generate regression scenarios to systematically exercise controls and eliminate product vulnerabilities.

What we're looking for

• 5+ years of experience in threat intelligence, threat hunting, or technical incident response within cyber security, product abuse, or trust domains.
• 5+ years of experience analyzing large, complex datasets using data analytics tools to identify anomalies and map behavioral trends.
• B.S. or M.S. in Computer Science, Cybersecurity, or a related technical field, or equivalent practical experience.
• Expert proficiency in Python and SQL to automate workflows, build investigative tools, or query big data pipelines.
• Hands-on experience in log analysis, digital forensics, and cyber investigation methodologies.
• Strong communication skills to translate complex technical research into actionable recommendations for cross-functional partners.
• Deep technical understanding of threat actor motivations and TTPs specific to financial fraud (preferred).
• Proficiency with platforms such as Databricks, Trino, PySpark, Pandas, or Scikit-Learn (preferred).