# Staff Security Engineer - Bot & Traffic Defence

**Company**: Faire
**Location**: San Francisco, CA
**Work arrangement**: hybrid
**Experience**: staff
**Job type**: full-time
**Salary**: $231,000 to $318,000 per year
**Category**: Security
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/faire/jobs/8868316002?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_3446366c-94a

## Description

Faire is seeking a Staff Security Engineer for its Bot & Traffic Defence team. As the first dedicated owner of this domain, you will set the technical direction, build controls and signals, and establish an ownership model across Security, Platform, service teams, and Anti-Abuse.

Responsibilities:

- Own the technical strategy and roadmap for bot, scraping, and application-layer DDoS defence end to end.

- Author and tune edge security controls as code: WAF rules, rate limiting policies, and challenge mechanisms.

- Build higher-confidence bot and trust signals to enforce more aggressively without turning legitimate logged-out buyers away.

- Design and operate distributed layer 7 rate limiting.

- Make incident response for bot and DDoS events a solved problem.

- Lead post-incident reviews on recurring classes of bot incidents.

- Build tooling, secure defaults, and playbooks for service-owning teams.

- Establish a durable ownership model across teams.

- Make Faire's bot posture legible to leadership.

Requirements:

- Hands-on operational ownership of a CDN or edge security platform.

- Experience defending a high-traffic consumer site against scraping and application-layer DDoS.

- Practical understanding of bot detection signals.

- Experience designing distributed rate limiting at layer 7.

- Quantitative rigour in detection work.

- Preference for solving traffic and abuse problems with code.

- Comfort writing and reviewing code in an OOP language.

- Working fluency with infrastructure as code and cloud environments.

- Experience owning incident response for a live traffic attack.

- Track record of setting technical direction in an ambiguous domain.

- Experience landing a cross-team ownership model.

- Comfort delivering primarily through other teams.

- Ability to put security risk in business terms for executives.

Technologies used:

- Kotlin, Typescript, Python

- Edge and CDN security tooling: WAF, rate limiting, bot management, challenge policies

- AWS, OCI, Terraform, Kubernetes

- HTTP, JSON, and Protocol Buffers

## Skills

### Required
- Kotlin
- Typescript
- Python
- WAF
- rate limiting
- bot management
- AWS
- OCI
- Terraform
- Kubernetes
- HTTP
- JSON
- Protocol Buffers
- edge security
- CDN security
- bot detection
- distributed rate limiting
- incident response

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/faire/jobs/8868316002?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)