Security Engineer (Anti-Abuse)

Note: This position is open to remote applicants based in Mexico only.
About Us
We are an external recruiting firm working on behalf of our confidential client, searching for the right talent to fulfill their specific needs.
The Recruiting Guy is the world's first concierge recruiting firm that's dedicated to connecting American companies with top-notch international remote talent. We accomplish this by partnering with recruiters across the globe in over 68 countries across all industries who serve as our local experts to expedite the full-cycle recruitment process, offer salary data and research at no additional cost, and educate our clients on how easy hiring international can be, the benefits of diverse talent, and quantifying the cost savings. It's our pleasure to service roles in all areas including engineering, technology, finance, accounting, SaaS, marketing and creative, legal, customer service and support, administrative support, IT support, data, AI, game design, c-suite and executive placement, operations, DevOps, UX/UI, and many others.
About The Position:
We are on a journey to help creators, publishers, and companies scale and monetize their audiences. Our platform is already home to tens of thousands of the most popular newsletters in the world. We have quickly grown, achieving $1M ARR in January 2023 and surpassing $7M just a year later in January 2024, with continued growth.
You will be a great fit if you have a well-thought-out technical perspective that you balance with a practical desire to ship to customers. We’re seeking a self-motivated teammate who communicates early and often and strives for the whole team to succeed. We are looking for a mid-level Security Engineer with at least 5 years of relevant experience working on application security, specializing in abuse detection. This role will be part of a cross-functional team focused on building a strategy to minimize platform abuse, identify malicious actors, and ensure the safety of our customers.
This position is part of a small but growing Application Security Team embedded within the broader Engineering organization.
Technologies we work with:

• Our application is built with: Ruby on Rails, React, Typescript, Redis, PostgreSQL, Elasticsearch.
• Our (nascent) data pipeline is built using Kafka, Clickhouse, Go, Kubernetes.

Ideally, you will have:

• Experience working on a cross-functional security team responsible for application abuse detection and mitigation.
• Understanding and experience with quantitative risk-based analysis.
• Familiarity with email-specific topics.
• Experience with KYC/third-party anti-fraud tools.
• Strong troubleshooting skills.
• Experience working with an Agile development team.
• 5+ years of relevant work experience.
• Experience with privacy, compliance, and regulatory topics.
• Experience working on small, highly productive engineering teams.
• Experience with advertising abuse, financial fraud, or bot detection.

Nice to have:

• Experience working with Rails apps.
• Experience designing and implementing ML pipelines from scratch.
• Experience building ML inferences as a service, over HTTP, RPC, IPC, or similar.
• Familiarity with Cloud Analytics/ML services like SageMaker, Databricks, Snowflake, MLFlow, or Clickhouse.
• Experience with reputation/brand management.
• Experience participating in anti-abuse or security working groups.

What you’ll be responsible for:

• Develop foundational processes and pipelines to detect and mitigate platform abuse.
• Perform analysis to measure success, identify emerging threats, and deliver creative solutions.
• Create innovative solutions to stop bad actors that intend to disrupt the intended customer experience.
• Deliver robust, well-documented solutions using programming experience.