Remote Anti-Bot Evasion Engineer

SearchApi; South Africa; On-site; ZAR 900,000 - 1,500,000; Full time

Benefits offered by this job

Fully remote

Equity share

Profit sharing

Learn fast

Annual team retreats

Job summary

SearchApi is looking for an engineer obsessed with breaking through anti-bot systems. You’ll tackle fingerprinting, TLS handshakes, and headless browser evasion against Cloudflare, Akamai, DataDome and PerimeterX, and you’ll analyze why your headless browser gets detected.

You’ll join a bootstrapped, profitable team delivering real-time SERP data to customers. You’ll research evasion techniques, reverse engineer protections, debug network traffic, and build internal tools for testing.

Qualifications

• Deep experience with Playwright, Puppeteer, or Selenium internals.
• Understanding of browser fingerprinting techniques and how to spoof them.
• Experience bypassing at least one major anti-bot system (Cloudflare, Akamai, DataDome, PerimeterX, etc.).
• Network traffic analysis (Wireshark, Burp Suite, mitmproxy, or similar).

Responsibilities

• Research and implement anti-bot evasion techniques.
• Reverse engineer bot detection systems.
• Work with browser fingerprinting: canvas, WebGL, audio, fonts, navigator properties, and more.
• Debug TLS and protocol fingerprinting (JA3, JA4, HTTP/2, HTTP/3 over QUIC, header order and casing).
• Push the QUIC frontier where most detection and most scrapers haven't caught up yet.
• Optimize Playwright/Puppeteer configurations for stealth.
• Analyze network traffic to understand detection mechanisms.
• Build internal tools for testing and validating evasion techniques.
• Stay ahead of the latest developments in bot detection.
• Document findings and share knowledge with the team.

Skills

Playwright internals

Fingerprinting techniques

Network analysis

TLS debugging

Education

BSc or higher in CS or equivalent

Tools

Wireshark

Burp Suite

mitmproxy

Job description

SearchApi is looking for an engineer obsessed with breaking through anti-bot systems. You’ll tackle fingerprinting, TLS handshakes, and headless browser evasion against Cloudflare, Akamai, DataDome and PerimeterX, and you’ll analyze why your headless browser gets detected.

You’ll join a bootstrapped, profitable team delivering real-time SERP data to customers. You’ll research evasion techniques, reverse engineer protections, debug network traffic, and build internal tools for testing.