Security Engineer – Bot Detection

Our mission is to help people integrate technology into everyday life and to enable innovation through technology. We offer software development and infrastructure solutions, with advanced competences in Blockchain, Artificial Intelligence and Machine Learning. All our offices (in Western Europe or nearshore, in CEE) are located within the boundaries of the European Union. We believe working in close cooperation with our clients and employees is the key to success; this means we offer people the best working environment in order to achieve the best results. We love entrepreneurial spirits and encourage people around us to be proactive and make the best decisions not only for business, but for their own personal development. Our nearshore Romanian offices are in Bucharest (Victoriei Square) and Iasi (Palace) and, with over 9000 team members at group level, we make sure we are always close to our customers.

About the role:

We are looking for a Security Engineer to join a Product Security initiative focused on building and improving bot detection and bot prevention capabilities across web, mobile, API and edge environments.

The role will contribute to the development of an internal bot management capability designed to distinguish between malicious automation, legitimate bots, AI-driven traffic, human users and unknown traffic.

The ideal candidate has direct experience with Bot Management, Bot Detection or Bot Prevention. Strong Application Security Engineers with relevant experience in WAF, CDN or edge security can also be considered.

You will join an engineering setup that already includes software engineers working on the bot initiative and will contribute to the further development and redesign of the existing solution.

What you will be working on:

• Bot detection and classification capabilities across web, mobile, APIs and edge services.
• Identification of malicious automation, legitimate bots, AI-driven traffic, human users and unknown traffic.
• Bot behaviour, automated traffic patterns and evolving evasion techniques.
• Web Application Firewall and edge security capabilities.
• Security telemetry, event data and traffic analysis.
• Detection quality, including precision, recall, false positives and unknown traffic.
• Production-grade detection logic and configuration.
• Monitoring and reporting for bot activity, coverage gaps and traffic changes.
• Security decisions such as allow, monitor, challenge, restrict or block.

What you will do:

• Design, build, test and tune bot detection signals and classification logic.
• Analyse automated traffic patterns and changes in bot behaviour.
• Identify new evasion techniques and translate findings into improved detection logic.
• Improve telemetry, coverage, data quality and attribution together with application and platform teams.
• Measure and continuously improve detection effectiveness.
• Maintain detection logic and security configuration as production software.
• Validate changes against representative traffic before production deployment.
• Support staged releases, monitoring and rollback mechanisms.
• Build monitoring and reporting capabilities for technical and business stakeholders.
• Work closely with Security, Engineering, Platform and Product teams.
• Help ensure security controls minimise the impact on legitimate customers and automated services.

Requirements:

• Strong professional experience in Security Engineering, Application Security or a related security engineering area.
• Experience working with production software or security systems.
• Good understanding of web, API and/or edge security.
• Hands-on coding experience with Python, Go, Java or a similar programming language.
• Experience analysing traffic, event or behavioural data.
• Understanding of automated traffic, abuse patterns and traffic protection mechanisms.
• Experience developing or maintaining detection logic, behavioural signals or classification systems.
• Good understanding of software testing, versioning and production deployment practices.
• Strong troubleshooting and problem-solving skills.
• Ability to work independently and take ownership of technical topics.
• Strong communication and collaboration skills in an international environment.

Nice to Have:

• Direct experience with Bot Management, Bot Detection or Bot Prevention.
• Experience with Web Application Firewalls.
• Experience with AWS WAF.
• Experience with Content Delivery Networks or edge security solutions.
• Previous software development background followed by a transition into Security Engineering.
• Experience with mobile application security.
• Experience with client-side security challenges or security SDK integrations.
• Knowledge of behavioural analytics, anomaly detection or Machine Learning-based classification.
• Experience in Fraud Prevention or Abuse Prevention.
• Threat Research or Incident Response experience.
• Experience with security dashboards, reporting or experiment design.

Once on board we offer various programs and benefits:

• 22 working days as Annual Vacation plus 3 additional days off.
• Floating days
• Medical Insurance at Signal Iduna.
• Benefit Online platform access, with a 690 RON monthly allowance from which you can choose to invest in different wellbeing, financial or retail packages.
• Company performance-based annual bonus prorated according to the number of worked months in a year
• Financial support for the birth of your child or unhappy events.
• Learning and development opportunities - allocated budget for certifications and/or trainings.