Senior Cybersecurity Engineer – Bot Detection

Staples India; Chennai District; Sur place; INR 1 800 000 - 2 400 000; Plein temps

Résumé du poste

Staples India Business Innovation Hub Private Limited in Chennai seeks a Senior Cybersecurity Engineer – Bot Detection to analyze, implement, and operate solutions that detect, analyze, and mitigate automated bot traffic across ecommerce platforms, web, mobile, and APIs.

You will protect customer-facing apps from credential stuffing, scraping, account takeover, and fraud while collaborating with fraud, SRE, and security operations to tune detection logic and minimize friction for legitimate

Qualifications

• Proven experience in designing and implementing security systems.
• Deep understanding of various security protocols and measures.

Responsabilités

• Analyze, implement, and operate bot-detection solutions across web, mobile, and APIs.
• Protect ecommerce and customer-facing applications from credential stuffing, scraping, account takeover, fraud, and abuse.
• Collaborate with application teams, fraud, SRE, and security operations to tune detection logic and respond to attacker techniques.
• Write and tune WAF rules and bot policies; build golden signals like login failure rate and unique IPs per account.
• Interact with senior management as a high-level security specialist.

Connaissances

Technical expertise

Problem-solving

Leadership

WAF/bot detection

Telemetry & logging

Threat detection

Formation

CISSP/CISM certification

Outils

Akamai

Cloudflare

Fastly

Splunk

SIEM

Description du poste

Staples India Business Innovation Hub Private Limited | Permanent

Senior Cybersecurity Engineer – Bot Detection

The Bot Detection Engineeris responsible foranalyzing, implementing, andoperatingsolutions that detect, analyze, and mitigate automated bot traffic across digital platforms, including web, mobile, and APIs. This role focuses on protecting ecommerce and customer facing applications from credential stuffing, scraping, account takeover, fraud, and abuse , while minimizing friction for legitimate users. The engineer partners closely with application teams, fraud, SRE, and security operations to continuously tune detection logic, respond to evolving attacker techniques, and improve overall digital resilience.

Duties & Responsibilities

Considered a high-level specialist who regularly interacts and works with senior management.

Uses advanced techniques, theories, and processes to complete work. Next step is typically management.

Typically reports to a department head or manager.

Performs work independently.

Competencies: Technical expertise. Problem-solving skills. Interpersonal skills. Leadership skills.

Ecommerce Fraud Attack Types, familiarity with:

• Credential stuffing / ATO(high-velocity login attempts, distributed IPs, low-and-slow)
• Carding(payment endpoint probing with small authorizations)
• Scalping / inventory denial(add-to-cart / checkout automation)

Telemetry + logging mastery: They should be comfortable using and correlating:

• WAF/CDN logs(Akamai, Cloudflare, Fastly, etc.)
• SIEM(Splunk/Kusto/Sentinel) for investigations and dashboards

Skills to target:

• Feature engineering (rate, burst, entropy, distribution anomalies)
• Baselines (normal traffic vs anomaly)
• Detection tuning (reduce false positives without losing coverage)
• Buildinggolden signals: login failure rate, unique IPs per account, new device rate, checkout abandonment spikes, 4xx/5xx patterns
• Protocols + client behavior
• navigator / canvas / WebGL anomalies
• TLS / JA3-style fingerprinting (conceptually)
• Writing and tuning WAF rules / bot policies
• Allowlist/denylist governance (and how allowlists get abused)
• Release discipline:
  • A/B testing of mitigation to protect conversion

Requirements

Basic Qualifications

Proven experience in designing and implementing security systems.

Deep understanding of various security protocols and measures.

Preferred Qualifications

Professional certifications such as CISSP, CISM, or similar.