Incident Response Manager - Abuse Operations

📋 Description

• Lead fraud and abuse incident response end-to-end as Incident Response Manager (IRM), coordinating
• Investigate, mitigate, and remediate urgent fraud incidents (e.g., ATO, card testing), utilizing
• As part of incidents, analyze high-risk accounts to identify fraudulent merchants, card testing
• Develop, document, and execute incident response strategies, runbooks, and capabilities to
• Partner cross-functionally with security, data science, legal, and policy teams to build agentic
• Mentor teammates, lead key incident response engineering projects, and elevate quality standards

🎯 Requirements

• 10+ years of experience leading security or fraud incident response
• B.S./M.S. in Computer Science or equivalent experience
• Expert knowledge of Python and SQL, and familiarity with other programming languages
• Existing experience with log analysis, network security, digital forensics, and incident response
• Proven ability to build automated response workflows, leverage threat intelligence, and make risk
• Strong written and verbal communication skills with a track record of driving cross-functional

🎁 Benefits

• Preferred: Broad expertise across fraud and abuse mitigation, risk management, product trust, and
• Preferred: An adversarial mindset, understanding TTPs of threat actors
• Preferred: Experience with engineering, data processing and analysis tools (e.g. Databricks, Trino)
• Preferred: Familiarity with open-source frameworks for big data processing (PySpark, Pandas
• Preferred: Experience with tactical threat intelligence and hunting for sophisticated threat actors
• Preferred: Ability to proactively challenge the status quo using data and a user-centric approach