Abuse Research Engineer

What you'll do

• Conduct hypothesis-driven threat hunting operations across internal telemetry and external data sources.
• Map fraud paths and decompose complex threats into structured kill chains using the FT3 framework.
• Integrate and automate threat intelligence feeds into engineering workflows.
• Translate research findings into actionable technical advisories and strategic control recommendations for stakeholders.
• Build agentic automated testing frameworks to simulate adversary tactics and techniques.
• Validate whether deployed security controls effectively interrupt empirical fraud kill chains.
• Generate regression scenarios to systematically eliminate product vulnerabilities and ensure consistent protection.

What we're looking for

• 5+ years of experience in threat intelligence, threat hunting, or technical incident response within cyber security, product abuse, or trust domains.
• 5+ years of experience analyzing large, complex datasets using data analytics tools to identify anomalies and map behavioral trends.
• B.S. or M.S. in Computer Science, Cybersecurity, or a related technical field, or equivalent practical experience.
• Expert proficiency in Python and SQL for automating workflows, building investigative tools, or querying big data pipelines.
• Hands-on experience in log analysis, digital forensics, and cyber investigation methodologies.
• Strong communication skills to translate complex technical research into actionable recommendations for cross-functional partners.
• Deep understanding of threat actor motivations and TTPs specific to financial fraud (preferred).
• Familiarity with standardized taxonomies like FT3 or MITRE ATT&CK; proficiency in Databricks, Trino, PySpark, Pandas, Scikit-Learn, TIPs, OSINT, or agentic LLM tools (preferred).