Sr. Engineer, Red Team, Bots & DDoS Threat Intelligence

Key job responsibilities

• Design and execute red team engagements targeting bot detection platforms, WAFs, CDN protections, and DDoS mitigation services
• Develop and maintain custom offensive tooling — anti-detect browser automation, TLS fingerprint manipulation (JA3/JA3S), Canvas/WebGL evasion, and behavioral replay systems
• Research and simulate emerging AI-driven attack vectors including autonomous browsing agents, LLM-powered bots, and agentic scraping techniques
• Mentor junior engineers on tradecraft, engagement methodology, and responsible offensive operations
• Collaborate with detection engineering teams to translate findings into measurable defensive improvements; author detailed technical reports with actionable remediation guidance

Basic Qualifications

• 5+ years of work in identifying security issues and risks, and developing mitigation plans experience
• 4+ years of (non-internship) scripting, programming, and security code review in common programming languages experience
• Knowledge of at least two of the following programming languages: Scala, Java, Python, C/C++, or Go
• Experience (non-internship) in industry-based security vulnerabilities identification, attack patterns, and remediation techniques

Preferred Qualifications

• Experience applying threat modeling or other risk identification techniques or equivalent
• 5+ years of experience in offensive security, red teaming, or penetration testing
• Deep hands-on expertise in web application security, bot evasion techniques, or DDoS attack methodologies
• Experience with anti-detect browser frameworks (Nodriver, Puppeteer Stealth, Playwright)
• Familiarity with LLM-based automation and AI agent architectures