Senior Software Engineer - Edge-Services Security

What We Offer:

• Accelerated Growth Environment: An environment designed for swift skill and knowledge enhancement, where you have the autonomy to lead experiments and tests on a massive scale.
• Top Tier Compensation Package: Competitive base, equity, and upside that tracks with your impact.
• Flexible Time Off: Enjoy unlimited Flex Time Off, giving you the flexibility to manage your schedule and take time to recharge as needed.
• Comprehensive Benefits Package: Prioritize your well-being with a comprehensive benefits package, featuring 401k, and premium Health, Vision, and Dental Insurance options
• The anticipated gross base pay range is below for this role. Actual compensation will vary depending on factors such as a candidate’s qualifications, skills, experience, and competencies. Base annual salary is one component of StubHub’s total compensation and competitive benefits package, which includes equity, 401(k), paid time off, paid parental leave, and comprehensive health benefits.
• Salary Range$200,000—$250,000 USD

About Us

Qualifications

• Familiarity with HTTP/2, QUIC, and emerging transport protocols for low-latency content delivery.
• Familiarity with custom device fingerprinting, rate limiting, and CAPTCHA challenge orchestration.
• Familiarity with principles of secure system design and zero-trust architectures.

Preferred Qualifications

• Familiarity with building and scaling fraud prevention systems or integrating with fraud intelligence platforms is a plus.

Responsibilities

• Design, implement, and operate CDN infrastructure using AWS CloudFront, Global Accelerator, bot management, and related services.
• Develop scalable systems for detecting and mitigating malicious automated traffic, using both commercial bot management platforms and homegrown controls.
• Codify reusable Infrastructure as Code (IaC) modules to enable other teams to deploy edge services safely and consistently.
• Integrate with fraud detection pipelines to inform real-time blocking or scoring decisions at the edge.
• Collaborate with security and platform teams to enforce zero-trust controls, request validation, and origin shielding.
• Integrate CDN & bot management application coverage into existing developer platform software & automation products.
• Drive edge observability strategy using metrics, traces, and logs to detect anomalies and optimize performance.
• Evaluate and implement new technologies (e.g., edge compute, rate limiting frameworks, multi-CDN failover strategies).
• Participate in incident response and root cause analysis for edge service outages or abuse-related escalations.
• Expert level experience with AWS edge and networking services (CloudFront, WAF, Route53, Shield, Global Accelerator).
• Expert level proficiency with Terraform and infrastructure-as-code patterns in production.
• Deep experience implementing or operating enterprise-grade bot management platforms (e.g., HUMAN, AWS Bot Control, Cloudflare Bot Management, Akamai Bot Manager).
• Advanced knowledge of HTTP protocol, CDN caching strategies, edge compute functions (e.g., Lambda@Edge), and TLS management.
• Strong software development experience in a modern language (e.g., Python, Go, TypeScript, Java).
• Track record of building safe, observable, and performant infrastructure at scale.
• Familiarity with building and scaling fraud prevention systems or integrating with fraud intelligence platforms is a plus.
• Experience authoring real-time request evaluation logic at the edge.
• Familiarity with HTTP/2, QUIC, and emerging transport protocols for low-latency content delivery.
• Familiarity with custom device fingerprinting, rate limiting, and CAPTCHA challenge orchestration.
• Experience supporting traffic segmentation, geo-steering, or multi-CDN architecture.
• Background in high-scale event collection and processing for edge analytics.
• Proficiency in implementing defense-in-depth mechanisms for Layer 7 attacks.
• Proficiency in building distributed rate-limiting or request scoring systems.
• Familiarity with principles of secure system design and zero-trust architectures.
• Contributions to open-source projects in the edge, networking, or observability space.