Staff Security Engineer, Bot & Traffic Defense Lead

Faire; San Francisco (CA); Hybrid; USD 231,000 - 318,000; Full time

Benefits offered by this job

Equity

Benefits

Hybrid work schedule

Job summary

Faire is seeking a Staff Security Engineer for Bot & Traffic Defence in San Francisco. You will own end-to-end bot, scraping, and application-layer DDoS defence, from edge controls through detection and scoring, and set the technical direction across Security, Platform, service teams, and Anti-Abuse.

You’ll implement edge controls as code, tune WAF and rate limiting, and build high-confidence signals while maintaining legitimate buyer access.

Qualifications

• Hands-on ownership of CDN/edge security in production
• Experience defending high-traffic consumer sites from scraping and DDoS
• Practical bot detection signals and attack-vector understanding
• Experience designing distributed layer 7 rate limiting and keying
• Ability to translate security risk into business terms

Responsibilities

• Own technical strategy and roadmap for bot, scraping, and application-layer DDoS defence end to end
• Write and tune edge security controls as code (WAF rules, rate limits, challenge mechanisms)
• Build bot/trust signals to minimize disruption of legitimate users
• Design and operate layer 7 rate limiting and manage counter state
• Lead post-incident reviews and drive systemic improvements
• Create tooling and playbooks to enable autonomy across teams
• Land a durable ownership model across Security, Platform, and Anti-Abuse
• Make bot posture legible to leadership and drive business decisions

Skills

Security engineering

Incident response

Cloud security

Code review/read unfamiliar service

Education

Bachelor-level degree in a relevant field

Tools

Cloudflare

Akamai

Fastly

AWS CloudFront/WAF/Shield

Job description

Faire is seeking a Staff Security Engineer for Bot & Traffic Defence in San Francisco. You will own end-to-end bot, scraping, and application-layer DDoS defence, from edge controls through detection and scoring, and set the technical direction across Security, Platform, service teams, and Anti-Abuse.

You’ll implement edge controls as code, tune WAF and rate limiting, and build high-confidence signals while maintaining legitimate buyer access.