Opportunity at
FaireStaff Security Engineer - Bot & Traffic Defence
Faire operates a technology wholesale platform designed to connect independent retailers and brands worldwide using data and machine learning. The engineering organization builds the software powering…
Career Tools
About This Role
Faire operates a technology wholesale platform designed to connect independent retailers and brands worldwide using data and machine learning. The engineering organization builds the software powering this global marketplace, and the Bot & Traffic Defence team focuses on safeguarding the platform against automated scraping, credential abuse, and application-layer DDoS attacks. As the first dedicated owner of this domain, the Staff Security Engineer will establish the technical strategy, design edge controls,…
Job Description
Faire operates a technology wholesale platform designed to connect independent retailers and brands worldwide using data and machine learning. The engineering organization builds the software powering this global marketplace, and the Bot & Traffic Defence team focuses on safeguarding the platform against automated scraping, credential abuse, and application-layer DDoS attacks.
As the first dedicated owner of this domain, the Staff Security Engineer will establish the technical strategy, design edge controls, and create operational frameworks across Security, Platform, service teams, and Anti-Abuse. This position requires hands-on coding, quantitative precision in threat detection, and the ability to implement distributed rate limiting at layer 7. The ideal candidate possesses deep experience defending high-traffic consumer web infrastructure against sophisticated adversaries and can translate technical security risks into clear business metrics for leadership.
Faire functions on a hybrid work model where employees work on-site three days a week—specifically Tuesdays, Thursdays, and a third flexible day—with the option to work remotely for up to four weeks per year.
Responsibilities
- Own the end-to-end technical strategy and roadmap for bot, scraping, and application-layer DDoS defense from the edge to detection and scoring systems.
- Author and tune infrastructure-as-code edge security controls, including WAF rules, rate limiting policies, and challenge mechanisms.
- Build high-confidence bot and trust signals to enable aggressive enforcement without disrupting legitimate users.
- Design and operate distributed layer 7 rate limiting across the infrastructure fleet.
- Establish clear incident response procedures, runbooks, and observability for bot and DDoS events.
- Lead post-incident reviews on recurring bot incidents to address systemic root causes.
- Develop internal tooling and secure defaults that empower service-owning teams to protect their endpoints independently.
- Define a durable cross-team ownership model for security attack vectors across Security, Platform, service teams, and Anti-Abuse.
- Communicate the company's bot posture and residual risk clearly to executive leadership.
Requirements
- Hands-on operational production experience managing a CDN or edge security platform like Cloudflare, Akamai, Fastly, or AWS CloudFront/WAF/Shield as code.
- Background defending a high-traffic consumer website against scraping and application-layer DDoS attacks.
- Practical knowledge of bot detection signals such as JA3/JA4 fingerprinting, behavioral metrics, mobile device attestation, and challenges.
- Experience designing distributed layer 7 rate limiting and managing counter state across a server fleet.
- Quantitative ability to measure precision and recall in detection work and establish false-positive tolerances.
- Proficiency writing and reviewing code in object-oriented programming languages including Kotlin, Java, Python, or TypeScript.
- Working familiarity with infrastructure as code and cloud environments such as Terraform, AWS, GCP, and Kubernetes.
- Experience managing incident response and making live traffic blocking decisions under pressure.
Core Skills
Benefits
- Competitive pay and equity
- Comprehensive benefits designed to support life inside and outside of work
- Flexibility to work remotely up to 4 weeks per year for hybrid roles
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the remote work policy for this role?
This is a hybrid position operating on-site three days a week on Tuesdays, Thursdays, and a third flexible day of the employee's choosing. Hybrid employees may also work remotely for up to four weeks per year.
What are the salary and compensation details?
The pay range for candidates in Canada is $190,500 to $262,000 per year, with eligibility for equity and benefits. Base pay is determined by transferable skills, work experience, market demands, and primary work location.
What is the exact job location?
The specific geographic location is not stated in the source posting, though Faire maintains headquarters in San Francisco and Kitchener-Waterloo, alongside offices in Toronto, London, and New York.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.
