Staff Security Engineer - Bot & Traffic Defence
Core
First dedicated owner of bot, scraping, and application-layer DDoS defence, setting technical direction and building controls from edge to detection.
Role type
Staff Security Engineer (Bot & Traffic Defence)
Builds
Scalable, reusable frameworks for bot detection, rate limiting, and incident response tooling.
Domain
E-commerce marketplace security, bot mitigation, and traffic defence
Deliverable
production ML models
Required skills
Edge security platform ownership (CDN/WAF), bot detection signal design, distributed layer 7 rate limiting, incident response leadership, quantitative detection analysis, OOP programming (Kotlin/Java/Python/TypeScript), infrastructure as code (Terraform/Kubernetes), cross-team ownership modelling, executive risk communication
Preferred skills
Experience with mobile device attestation, challenge mechanisms, and translating traffic metrics into business terms
Technologies
Kotlin, TypeScript, Python, WAF, rate limiting, bot management, AWS, OCI, Terraform, Kubernetes, HTTP, JSON, Protocol Buffers
Responsibilities
Own technical strategy and roadmap for bot and DDoS defence; author and tune edge security controls as code; build high-confidence bot and trust signals; design and operate distributed layer 7 rate limiting; lead incident response and post-incident reviews; build tooling and playbooks for service teams; establish cross-team ownership models; communicate security risk to leadership
Seniority
Staff, hands-on IC with strategic ownership
