5 hours ago
Base Salary
$231k - $318k/yr
Responsibilities
- Own the end-to-end technical strategy and roadmap for bot, scraping, and application-layer DDoS defense.
- Author and tune WAF rules, rate-limiting policies, and challenge mechanisms as code.
- Build bot and trust signals, distributed Layer 7 rate limiting, and enforcement controls across the stack.
- Establish incident response paths, runbooks, observability, and post-incident reviews for bot and DDoS events.
- Create tooling, secure defaults, and playbooks that enable service teams to protect their own endpoints.
- Define durable ownership across Security, Platform, service teams, and Anti-Abuse, and communicate residual risk to leadership.
Requirements
- Hands-on production ownership of CDN or edge security platforms such as Cloudflare, Akamai, Fastly, or AWS CloudFront/WAF/Shield, managed as code.
- Experience defending high-traffic consumer sites against scraping and application-layer DDoS attacks.
- Practical knowledge of bot detection signals including TLS and HTTP fingerprinting, behavioral signals, mobile device attestation, and challenges.
- Experience designing distributed Layer 7 rate limiting using per-IP, per-ASN, per-session, or per-fingerprint keys.
- Ability to measure detection precision and recall, set false-positive tolerances, and make data-based threshold decisions.
- Experience writing and maintaining internal incident-response tooling and owning live traffic-attack response.
- Comfort reviewing and writing code in Kotlin, Java, Python, or TypeScript.
- Working fluency with Terraform, AWS or GCP, and Kubernetes for security control planes.
- Track record of setting technical direction in ambiguous domains and establishing cross-team ownership without direct authority.
- Ability to deliver through other teams and communicate security risks, attack trade-offs, and business exposure to engineers and executives.
Benefits
- Base pay range of $231,000 to $318,000 per year in San Francisco, plus equity and comprehensive benefits.
- Hybrid schedule with three office days per week on Tuesdays, Thursdays, and one flex day, with up to four weeks of remote work per year.
- Access to enterprise AI tools and a collaborative environment focused on growth, equal opportunity, and belonging.
Tech Stack
Categories
About Faire
Faire builds a B2B wholesale marketplace that connects independent retailers with consumer brands for product discovery, ordering, and net terms. It monetizes through marketplace commissions and financial services, and provides tools for payments, returns, and analytics to help shops source inventory. Founded in 2017 and headquartered in San Francisco, it operates across North America and Europe and is privately held.