Security Incident Response Manager, Abuse Operations

What you'll do

• Lead end-to-end fraud and abuse incident response as an Incident Response Manager.
• Investigate and remediate urgent fraud incidents such as account takeovers and card testing.
• Analyze high-risk accounts to identify fraudulent merchants and classify threats using standard taxonomies.
• Develop, document, and execute incident response strategies and runbooks to improve detection capabilities.
• Partner with cross-functional teams to build automated agentic response solutions and refine KPIs.
• Conduct gamedays to pressure-test response processes and drive proactive improvements.
• Mentor teammates and lead engineering projects to elevate quality standards across the team.

What we're looking for

• 10+ years of experience leading security or fraud incident response.
• B.S./M.S. in Computer Science or equivalent experience.
• Expert knowledge of Python and SQL, with familiarity in other programming languages.
• Experience with log analysis, network security, digital forensics, and incident response investigations.
• Proven ability to build automated response workflows, leverage threat intelligence, and make risk mitigation recommendations.
• Strong written and verbal communication skills to drive cross-functional alignment with minimal oversight.
• Broad expertise across fraud and abuse mitigation, risk management, product trust, and threat intelligence in a complex platform environment (preferred).
• Experience with engineering/data tools (Databricks, Trino) or open-source frameworks like PySpark and Pandas (preferred).