Staff Security Engineer - Bot & Traffic Defence

📋 Description

• Own the technical strategy and roadmap for bot, scraping, and application-layer DDoS defence end to
• Author and tune edge security controls as code: WAF rules, rate limiting policies, and challenge
• Build higher-confidence bot and trust signals so that Faire can enforce more aggressively without
• Design and operate distributed layer 7 rate limiting, and make the calls on keying, counter state
• Make incident response for bot and DDoS events a solved problem: clear paging paths, runbooks a
• Lead post-incident reviews on recurring classes of bot incidents so systemic causes surface instead

🎯 Requirements

• Hands-on operational ownership of a CDN or edge security platform (Cloudflare, Akamai, Fastly, or
• Experience defending a high-traffic consumer site against scraping and application-layer DDoS
• A practical understanding of bot detection signals and where each one fails: TLS and HTTP
• Experience designing distributed rate limiting at layer 7, including the differences between
• Quantitative rigour in detection work: you can measure a detection's precision and recall, set a
• A preference for solving traffic and abuse problems with code rather than manual operations

🎁 Benefits

• Move fast: You'll own meaningful problems that serve customers around the globe with the agency to
• Equipped to scale: We invest in what matters, including the latest enterprise AI tools, to help you
• Best in class: Our team is full of sharp, kind, and generous colleagues who care about their craft
• Real rewards. Competitive pay, equity, and comprehensive benefits designed to support your life
• Belonging: We're intentional about building an environment where every Faire employee has equal