Engineering Manager, Abuse Control Engineering

Role overview This engineering management role leads an abuse control team that functions as a rapid-response technical defense and control incubator for a large payments platform. The manager sets technical direction, develops engineers, and ensures that urgent safeguards are prototyped, evaluated, and smoothly transferred to long-term product owners.

Responsibilities - Define and communicate technical strategy for identifying cross-product abuse gaps, incubating controls, and preventing recurrence of mitigated threats - Hire, manage, coach, and develop engineers with clear expectations and feedback that grow technical judgment and impact - Ensure attacker evidence, product context, and measurable outcomes inform control design and investment decisions - Partner with Application Security and product engineering to develop safeguards that are resilient, appropriately scoped, and compatible with surrounding systems - Guide experiments that balance risk reduction against effects on legitimate user conversion - Ensure the team builds regression tests and other mechanisms that detect when previously mitigated abuse patterns return - Establish success measures, documentation, destination owners, handoff criteria, and target dates for incubated controls - Hold the team and partners accountable for transferring successful controls to product teams that permanently own the relevant surfaces - Align security, product, engineering, and other partners around priorities, tradeoffs, and delivery plans, including during urgent coordination

Requirements - Experience managing an engineering team, including setting direction, prioritizing work, and being accountable for delivery and technical outcomes - Technical foundation in software engineering, security engineering, application security, anti-abuse engineering, or a closely related field - Experience hiring, coaching, and developing engineers across different levels and providing actionable career feedback - Experience leading cross-functional technical work involving teams with different goals and ownership boundaries - Ability to evaluate technical designs, ask effective questions, and guide decisions involving reliability, security, risk, and product tradeoffs - Clear communication of technical strategy, priorities, risks, and decisions to engineering teams and cross-functional stakeholders - Ability to create clarity in ambiguous or urgent situations and translate broad risk problems into actionable plans and measurable outcomes

Nice to have - Experience guiding experimentation or A/B testing, including balancing risk reduction against effects on legitimate user conversion - Knowledge of threat modeling, secure systems design, or modern application security practices - Familiarity with API safeguards and abuse controls such as rate limits, authorization checks, input validation, or step-up challenges - Knowledge of financial-fraud patterns, attacker behavior, attack methods, or abuse infrastructure - Experience using large-scale data platforms to analyze system activity or measure control performance - Experience incubating technical capabilities and transferring them through explicit success criteria and target dates - Experience leading distributed teams or coordinating execution across multiple locations and time zones