Your browser does not support javascript! Please enable it, otherwise web will not work for you.

Staff Security Engineer

Home > Kotlin programming jobs

Staff Security Engineer in Canada new

  • Toronto

Responsibilities

  • Own the technical strategy and roadmap for bot, scraping, and application-layer DDoS defense from edge controls through detection and scoring.
  • Author and tune WAF rules, rate-limiting policies, and challenge mechanisms as code against evolving adversaries.
  • Build bot and trust signals that enable stronger enforcement while minimizing impact on legitimate buyers.
  • Design and operate distributed Layer 7 rate limiting, including keying, counter state, and enforcement placement.
  • Establish incident-response procedures, paging paths, runbooks, and observability for bot and DDoS events.
  • Lead post-incident reviews and identify systemic causes of recurring bot incidents.
  • Build tooling, secure defaults, and playbooks that enable service teams to protect their endpoints.
  • Establish cross-team ownership for attack vectors across Security, Platform, service teams, and Anti-Abuse.
  • Communicate residual risk and traffic-abuse exposure to leadership and drive outstanding business decisions.

Requirements

  • Hands-on production ownership of a CDN or edge security platform such as Cloudflare, Akamai, Fastly, or AWS CloudFront/WAF/Shield, managed as code.
  • Experience defending high-traffic consumer sites against scraping and application-layer DDoS attacks.
  • Practical knowledge of bot detection signals including TLS and HTTP fingerprinting, JA3/JA4, behavioral signals, mobile device attestation, and challenges.
  • Experience designing distributed Layer 7 rate limiting using per-IP, per-ASN, per-session, and per-fingerprint keying.
  • Ability to measure detection precision and recall, establish false-positive tolerances, and justify threshold changes with data.
  • Experience building and maintaining internal tooling for incident response and on-call engineering.
  • Ability to read and review code in an object-oriented language such as Kotlin, Java, Python, or TypeScript.
  • Working fluency with infrastructure as code and cloud environments including Terraform, AWS or GCP, and Kubernetes.
  • Experience owning incident response for live traffic attacks, including making time-sensitive traffic-blocking decisions.
  • Track record of setting technical direction in ambiguous domains and sequencing competing priorities.
  • Experience establishing cross-team ownership models without direct authority.
  • Ability to deliver through other teams and communicate security risks, attack trade-offs, revenue impact, cost, and reputational exposure to technical and executive audiences.

Benefits

  • Base salary range of $190,500 to $262,000 per year in Canada, plus equity and comprehensive benefits.
  • Hybrid work requires three office days per week on Tuesdays, Thursdays, and one flex day on Monday, Wednesday, or Friday.
  • Hybrid employees may work remotely for up to four weeks per year.
  • Employees receive access to enterprise AI tools and opportunities for growth in an inclusive workplace.

Faire

Faire is a wholesale technology platform empowering brands and retailers to strengthen the unique character of local communities.

Similar positions

Software Engineer, Mobile Core (Android)

  • Notion
  • Full time
  • USA
  • 10/02/2026
  • Salary: $150k - $168k/yr
  • San Francisco, CA

Consultant Kotlin Bengaluru Engineering Platform

  • Deloitte Advisory
  • Full time
  • Others
  • 10/02/2026
  • Bengaluru, India

Senior Software Engineer

  • Toast, Inc.
  • Full time
  • Others
  • 10/02/2026
  • Salary: Competitive
  • Bengaluru, India

Android Software Engineer

  • Swissquote
  • Full time
  • Others
  • 10/02/2026
  • Gland, Switzerland

Software Engineer, Passport & Commerce, Android

  • Airbnb
  • Full time
  • USA
  • 10/02/2026
  • Salary: $162k - $186k/yr
  • Remote

Listings

by


Job Type

Language

Country

CodingJobBoard.com © 2026