# Staff Security Engineer - Bot & Traffic Defence

**Company**: Faire
**Location**: Kitchener-Waterloo, Toronto, ON
**Work arrangement**: hybrid
**Experience**: staff
**Job type**: full-time
**Salary**: $190,500 to $262,000 per year
**Category**: Security
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/faire/jobs/8857042002?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_c6196554-c68

## Description

Faire is a technology wholesale platform built on the belief that the future is local. Independent retailers around the globe collectively represent a multi-hundred-billion-dollar wholesale market that has historically been fragmented and offline. At Faire, we're using the power of tech, data, and machine learning to connect this thriving community of entrepreneurs across the globe.

As a Staff Security Engineer, Bot & Traffic Defence, you will be the first dedicated owner of this domain. You will set the technical direction, build the controls and signals that back it, and establish an ownership model that holds across Security, Platform, service teams, and Anti-Abuse.

Responsibilities:

- Own the technical strategy and roadmap for bot, scraping, and application-layer DDoS defence end to end, from edge controls through detection and scoring.

- Author and tune edge security controls as code: WAF rules, rate limiting policies, and challenge mechanisms.

- Build higher-confidence bot and trust signals so that Faire can enforce more aggressively without turning legitimate logged-out buyers away.

- Design and operate distributed layer 7 rate limiting.

- Make incident response for bot and DDoS events a solved problem.

- Lead post-incident reviews on recurring classes of bot incidents.

- Build the tooling, secure defaults, and playbooks that let service-owning teams protect their own endpoints correctly.

- Land a durable ownership model across Security, Platform, service teams, and Anti-Abuse.

Requirements:

- Hands-on operational ownership of a CDN or edge security platform in production against real adversaries.

- Experience defending a high-traffic consumer site against scraping and application-layer DDoS.

- Practical understanding of bot detection signals and where each one fails.

- Experience designing distributed rate limiting at layer 7.

- Quantitative rigour in detection work.

- Preference for solving traffic and abuse problems with code rather than manual operations.

- Comfort writing and reviewing code in an OOP language.

- Working fluency with infrastructure as code and cloud environments.

- Experience owning incident response for a live traffic attack.

- Track record of setting technical direction in an ambiguous domain with no existing owner.

- Experience landing a cross-team ownership model without authority.

Technologies used:

- Kotlin, Typescript, Python

- Edge and CDN security tooling: WAF, rate limiting, bot management, challenge policies

- AWS, OCI, Terraform, Kubernetes

- HTTP, JSON, and Protocol Buffers

## Skills

### Required
- Kotlin
- Typescript
- Python
- WAF
- rate limiting
- bot management
- AWS
- OCI
- Terraform
- Kubernetes
- HTTP
- JSON
- Protocol Buffers

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/faire/jobs/8857042002?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)