Security Engineer – Bot Detection

Seniority: Mid-Senior / Senior Level
Department: Cybersecurity / Product Security
Employment Type: Full-time / Hybrid - 2 days at the office

Role Overview

We are looking for an experienced Security Engineer – Bot Detection to develop and improve automated traffic detection and protection across web applications, mobile platforms, APIs, and edge services.

The ideal candidate combines strong software engineering skills with experience in traffic analysis, cybersecurity, and behavioral detection.

You will be responsible for identifying and classifying malicious bots, AI-driven automation, legitimate automated services, and human traffic while ensuring security measures do not negatively impact genuine users.

Key Responsibilities

• Design, develop, and optimize bot detection and traffic classification systems across web, mobile, API, and edge environments.
• Build detection rules and behavioral signals to identify malicious bots, AI-driven automation, scraping, and suspicious traffic patterns.
• Analyze traffic data to identify emerging bot behaviors, automation techniques, and evasion methods.
• Improve security telemetry, logging, and traffic monitoring in collaboration with application and infrastructure teams.
• Develop and maintain detection logic using version control, automated testing, staged deployments, and rollback procedures.
• Monitor detection accuracy, false positives, precision, recall, and overall customer impact.
• Build dashboards and reporting tools to track bot activity, traffic anomalies, and detection performance.
• Implement and optimize bot mitigation strategies, including monitoring, challenges, rate limiting, restrictions, and blocking.
• Collaborate with security, engineering, data, and product teams to continuously improve bot protection capabilities.

Required Skills & Experience

• Strong experience in security engineering, software development, bot detection, or traffic protection systems.
• Proficiency in Python, Go, or Java, including developing and maintaining production applications.
• Hands-on experience analyzing large volumes of web, mobile, or API traffic data.
• Experience developing detection rules, behavioral analytics, or traffic classification logic.
• Good understanding of web application security, API security, and automated traffic threats.
• Knowledge of common bot activities, including scraping, credential stuffing, automated abuse, and bot evasion techniques.
• Experience measuring detection accuracy and minimizing false positives.
• Familiarity with logging, monitoring, and traffic analysis tools.
• Strong analytical, troubleshooting, and problem-solving skills.
• Ability to collaborate effectively with security, software engineering, and product teams.

Nice to Have

• Experience with bot management platforms, Web Application Firewalls (WAF), CDNs, or edge security solutions.
• Familiarity with Cloudflare, Akamai, AWS WAF, or similar traffic protection technologies.
• Knowledge of mobile application security, client-side bot detection, or security SDK integrations.
• Experience with machine learning, statistical classification, anomaly detection, or behavioral analytics.
• Familiarity with SQL, traffic analytics, dashboards, and security reporting.
• Experience with fraud prevention, abuse detection, threat intelligence, or incident response.
• Knowledge of CI/CD pipelines, automated testing, and security-focused software development.

Ideal Candidate

A hands-on security engineer with strong programming and analytical skills who understands how automated traffic behaves and how to distinguish malicious automation from legitimate users and services.

The role requires someone comfortable working across cybersecurity, software engineering, traffic analytics, and bot mitigation, with a focus on developing accurate detection systems while protecting customer experience.