Senior Cybersecurity Engineer – Bot Detection

Staples India; Chennai District; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

Staples India Business Innovation Hub Private Limited in Chennai is seeking a Senior Cybersecurity Engineer – Bot Detection to design, implement, and run solutions that detect and mitigate automated bot traffic across web, mobile, and APIs.

You will work with cross-functional teams to protect ecommerce platforms from credential stuffing, scraping, account takeover, fraud, and abuse, while minimizing friction for legitimate users.

Qualifications

• Proven experience in designing and implementing security systems.
• Deep understanding of security protocols and measures.

Responsibilities

• Analyze and mitigate automated bot traffic across web, mobile, and APIs.
• Tune detection logic with application teams, fraud, SRE, and SOC.
• Collaborate to continuously improve digital resilience and reduce fraud.
• Operate WAF/CDN logs and SIEM investigations for dashboards.

Skills

Feature engineering

Baselines

Detection tuning

Golden signals

Protocols

Client behavior

WAF rules

Bot policies

Release discipline

A/B testing

Education

CISSP or CISM certification

Tools

Akamai

Cloudflare

Fastly

Splunk

Kusto

Sentinel

Job description

Staples India Business Innovation Hub Private Limited | Permanent

Senior Cybersecurity Engineer – Bot Detection

The Bot Detection Engineeris responsible for analyzing, implementing, and operating solutions that detect, analyze, and mitigate automated bot traffic across digital platforms, including web, mobile, and APIs. This role focuses on protecting ecommerce and customer facing applications from credential stuffing, scraping, account takeover, fraud, and abuse, while minimizing friction for legitimate users. The engineer partners closely with application teams, fraud, SRE, and security operations to continuously tune detection logic, respond to evolving attacker techniques, and improve overall digital resilience.

Duties & Responsibilities

Considered a high-level specialist who regularly interacts and works with senior management.

Uses advanced techniques, theories, and processes to complete work. Next step is typically management.

Typically reports to a department head or manager.

Performs work independently.

Competencies: Technical expertise. Problem-solving skills. Interpersonal skills. Leadership skills.

Ecommerce Fraud Attack Types, familiarity with:

• Credential stuffing / ATO(high-velocity login attempts, distributed IPs, low-and-slow)
• Carding(payment endpoint probing with small authorizations)
• Scalping / inventory denial(add-to-cart / checkout automation)

Telemetry + logging mastery: They should be comfortable using and correlating:

• WAF/CDN logs(Akamai, Cloudflare, Fastly, etc.)
• SIEM(Splunk/Kusto/Sentinel) for investigations and dashboards

Skills to target:

• Feature engineering (rate, burst, entropy, distribution anomalies)
• Baselines (normal traffic vs anomaly)
• Detection tuning (reduce false positives without losing coverage)
• Buildinggolden signals: login failure rate, unique IPs per account, new device rate, checkout abandonment spikes, 4xx/5xx patterns
• Protocols + client behavior
• navigator / canvas / WebGL anomalies
• TLS / JA3-style fingerprinting (conceptually)
• Writing and tuning WAF rules / bot policies
• Allowlist/denylist governance (and how allowlists get abused)
• Release discipline:
• A/B testing of mitigation to protect conversion

Requirements

Basic Qualifications

• Proven experience in designing and implementing security systems.
• Deep understanding of various security protocols and measures.

Preferred Qualifications

• Professional certifications such as CISSP, CISM, or similar.