Staff Security Engineer - Bot & Traffic Defence

Staff security engineer and first dedicated owner of bot and traffic defence at Faire, defending against scrapers, credential abuse and layer 7 DDoS at the edge and in detection and scoring. Based in San Francisco.

The engineer sets strategy and roadmap, writes and tunes WAF rules, rate limits and challenges as code, builds stronger bot and trust signals so enforcement can tighten without blocking real buyers, designs distributed layer 7 rate limiting, makes bot and DDoS incident response routine with runbooks and observability, and establishes clear ownership across Security, Platform, service teams and Anti-Abuse. Faire wants production ownership of a CDN or edge security platform such as Cloudflare, Akamai or Fastly managed as code, experience defending a high-traffic consumer site, deep knowledge of bot signals like JA3/JA4 fingerprinting and device attestation, and strong coding and Terraform skills.