Staff Security Engineer
Core
Own technical strategy and roadmap for bot, scraping, and application-layer DDoS defense from edge controls through detection and scoring.
Role type
Staff Security Engineer (Edge Security & Anti-Abuse)
Builds
Distributed Layer 7 rate limiting, bot/trust signals, incident-response tooling, and secure defaults for service teams.
Domain
Cybersecurity, Edge Security, Anti-Abuse
Deliverable
production ML models
Required skills
Hands-on production ownership of CDN/edge security platforms, defending high-traffic sites against scraping/DDoS, bot detection signals (TLS/HTTP fingerprinting, JA3/JA4, behavioral signals), distributed Layer 7 rate limiting design, measuring detection precision/recall, building internal incident response tooling, reading/reviewing code in Kotlin/Java/Python/TypeScript, infrastructure as code (Terraform), cloud environments (AWS/GCP), Kubernetes, leading post-incident reviews, establishing cross-team ownership models.
Preferred skills
N/A
Technologies
Cloudflare, Akamai, Fastly, AWS CloudFront/WAF/Shield, Terraform, AWS, GCP, Kubernetes, Kotlin, Java, Python, TypeScript
Responsibilities
Author and tune WAF rules, rate-limiting policies, and challenge mechanisms as code; Design and operate distributed Layer 7 rate limiting; Establish incident-response procedures and observability; Lead post-incident reviews; Build tooling and playbooks for service teams; Communicate residual risk and traffic-abuse exposure to leadership.
Seniority
Staff, hands-on IC with strategic leadership
