Your browser does not support javascript! Please enable it, otherwise web will not work for you.

Staff Security Engineer

Home > Kotlin programming jobs

Staff Security Engineer in Canada

  • Toronto

Responsibilities

  • Own the technical strategy and roadmap for bot, scraping, and application-layer DDoS defense from edge controls through detection and scoring.
  • Author and tune WAF rules, rate-limiting policies, and challenge mechanisms as code against evolving adversaries.
  • Build bot and trust signals that enable stronger enforcement while minimizing impact on legitimate buyers.
  • Design and operate distributed Layer 7 rate limiting, including keying, counter state, and enforcement placement.
  • Establish incident-response procedures, paging paths, runbooks, and observability for bot and DDoS events.
  • Lead post-incident reviews and identify systemic causes of recurring bot incidents.
  • Build tooling, secure defaults, and playbooks that enable service teams to protect their endpoints.
  • Establish cross-team ownership for attack vectors across Security, Platform, service teams, and Anti-Abuse.
  • Communicate residual risk and traffic-abuse exposure to leadership and drive outstanding business decisions.

Requirements

  • Hands-on production ownership of a CDN or edge security platform such as Cloudflare, Akamai, Fastly, or AWS CloudFront/WAF/Shield, managed as code.
  • Experience defending high-traffic consumer sites against scraping and application-layer DDoS attacks.
  • Practical knowledge of bot detection signals including TLS and HTTP fingerprinting, JA3/JA4, behavioral signals, mobile device attestation, and challenges.
  • Experience designing distributed Layer 7 rate limiting using per-IP, per-ASN, per-session, and per-fingerprint keying.
  • Ability to measure detection precision and recall, establish false-positive tolerances, and justify threshold changes with data.
  • Experience building and maintaining internal tooling for incident response and on-call engineering.
  • Ability to read and review code in an object-oriented language such as Kotlin, Java, Python, or TypeScript.
  • Working fluency with infrastructure as code and cloud environments including Terraform, AWS or GCP, and Kubernetes.
  • Experience owning incident response for live traffic attacks, including making time-sensitive traffic-blocking decisions.
  • Track record of setting technical direction in ambiguous domains and sequencing competing priorities.
  • Experience establishing cross-team ownership models without direct authority.
  • Ability to deliver through other teams and communicate security risks, attack trade-offs, revenue impact, cost, and reputational exposure to technical and executive audiences.

Benefits

  • Base salary range of $190,500 to $262,000 per year in Canada, plus equity and comprehensive benefits.
  • Hybrid work requires three office days per week on Tuesdays, Thursdays, and one flex day on Monday, Wednesday, or Friday.
  • Hybrid employees may work remotely for up to four weeks per year.
  • Employees receive access to enterprise AI tools and opportunities for growth in an inclusive workplace.

Faire

Faire is a wholesale technology platform empowering brands and retailers to strengthen the unique character of local communities.

Similar positions

Principal Engineer (Payments)

  • Masabi
  • Full time
  • UK
  • 10/04/2026
  • Remote

Staff Android Engineer (Clients Platform)

  • Reddit
  • Full time
  • USA
  • 10/04/2026
  • Salary: $217k-$304k
  • Remote

Senior Staff Software Engineer - Trust

  • Airbnb
  • Full time
  • USA
  • 10/04/2026
  • Salary: $248k-$310k
  • Remote

Software Engineer, Android

  • Match Group
  • Full time
  • USA
  • 10/03/2026
  • Salary: $95k - $115k/yr
  • Los Angeles, CA

Senior iOS Engineer (KMP) - POS

  • SumUp
  • Full time
  • Others
  • 10/03/2026
  • Berlin, Germany

Listings

by


Job Type

Language

Country

CodingJobBoard.com © 2026