This role pays more than
82%
of similar roles. Most pay
$151,475–$208,800
— the shaded band above.
At the midpoint, this role pays about
$216k
versus about
$180k
for comparable roles.
Based on 240 similar postings.
Employer
About Stripe
Stripe is a financial infrastructure platform for internet businesses, providing payment processing, billing, fraud prevention, and banking-as-a-service APIs to businesses of all sizes globally. Industry: Payments Infrastructure & Financial Technology
Stripe currently has
174 open roles
on FindRole.
Listed pay typically runs
$190,400–$285,600
across 172 roles with salary data.
Security Engineer
As a member of the Abuse Control Engineering team, you will design, prototype, and incubate technical defenses to protect the financial ecosystem from complex abuse vectors. You will translate threat intelligence into hard requirements like API rate-limiting, step-up challenges, and parameter validation while balancing security against user conversion through rigorous A/B testing. Your daily work involves building automated regression suites, conducting attack simulations, and managing the lifecycle of maturing controls for handoff to product teams. The role requires expertise in Python, Go, or Java, along with advanced SQL skills for analyzing system telemetry. You will leverage these tools to build safeguards across payment, onboarding, and identity surfaces. This position addresses critical security challenges by creating rapid-response technical defenses against emerging threats like account takeovers and card testing within a high-scale production environment.
What does a Security Engineer earn?
Median $191650 from 86 postings across 39 companies.
Design, prototype, and deploy technical controls across API, protocol, and product boundaries to close high-impact abuse vectors.
Translate empirical attacker evidence and threat research into precise technical requirements and control specifications.
Run rigorous experiments and A/B tests to balance risk reduction against legitimate user conversion impact.
Build comprehensive regression testing suites and automated attack simulations to prevent the recurrence of mitigated threats.
Manage the incubation lifecycle by defining handoff criteria and documentation to transfer mature controls to product teams.
Develop API-level safeguards, rate-limiting frameworks, and authentication checks in high-scale production environments.
Analyze system telemetry using SQL and large-scale data processing platforms to monitor control performance.
What we're looking for
3+ years of experience in Security Engineering, Software Engineering, Application Security, or Anti-Abuse Engineering in a high-scale production environment.
B.S. or M.S. in Computer Science, Cybersecurity, Software Engineering, or a related technical field, or equivalent practical experience.
Expert proficiency in Python, Go, Java, or similar production languages and expert SQL skills for analyzing system telemetry.
Hands-on engineering experience building API-level safeguards, rate-limiting frameworks, authentication/authorization checks, or input validation controls.
Demonstrated experience with automated testing frameworks, including writing unit, integration, and regression tests for critical backend software.
Strong cross-functional collaboration and communication skills to partner across security, product, and platform teams.
Proven track record of designing and executing A/B tests while balancing security safeguards against user conversion friction (preferred).
Deep expertise in threat modeling, secure system architecture, and modern application security design principles (preferred).