Threat Research Engineer (Client Side)

À propos du poste

<p><strong>⭐ About the team:</strong></p> <p>Made up of six subteams (Dashboard, Engine, Infrastructure, Integrations, Threat Research & Security), the DataDome tech team is spread across Europe and the US. We handle over 2 000 billion events per day giving responses within 3ms (99p). We are present in more than 29 data centers around the world, deployed using Docker.</p> <p>We deploy on AWS, Scaleway and GCP, using Docker, Ansible and Terraform, and monitor with Grafana and Prometheus. We handle an average of  8 billion requests per day and manage more than 300 TB of data per month.</p> <p>When it comes to our stack, we run real-time detection layer in Java, low latency Stream Engine running on Flink in Scala, ElasticSearch for storage, Kafka for communication between layers, HAProxy for load balancing, Symfony & Angular for our dashboards. While previous experience in cyber is not a must, we'll pair you with mentors who will help you bridge the gaps. As #growth is part of our DNA, we’ll give you the resources and support you need to develop mastery.</p> <p>You will integrate the Threats Research team which is responsible for constantly improving the detection capabilities through client-side technologies.</p> <p>Your goal will be to challenge and improve our detection capabilities.</p> <h3>👉 <span class="notion-enable-hover" data-token-index="1">Responsabilities:</span></h3> <ul> <li>Internal bot detection red team: <ul> <li>Challenge our bot detection mechanisms to ensure we properly detect bots. Create tools to automate this process.</li> <li>Help detect bypasses proactively by analyzing different modules as well as potential misconfigurations on our customer websites</li> </ul> </li> </ul> <ul> <li>Improve client-side bot detection: <ul> <li>Add new signals to our client-side scripts to collect browser fingerprints capable of detecting advanced bots</li> <li>Improve security and resilience of our JavaScript code by implementing obfuscation techniques to prevent reverse engineering</li> <li>Collaborate with mobile team to collect new signals in our SDK to improve mobile bot detection</li> </ul> </li> </ul> <ul> <li>Research <ul> <li>Collaborate with other member of the threat research teams as well as member of other teams to implement new approaches to improve bot detection</li> </ul> </li> </ul> <ul> <li>Communication: <ul> <li>Share your results externally using appropriate communication medium, such as meetups, conference talks, academic papers, blog posts</li> </ul> </li> </ul> <h3>👤 <span class="notion-enable-hover" data-token-index="1">It would be great if you</span> have:</h3> <ul> <li>At least 5 years of experience programming in JavaScript</li> <li>Strong computer science background</li> <li>Experience dealing with bots or malware</li> <li>Strong knowledge of web and network infrastructures</li> <li>Strong knowledge of web client side technologies</li> <li>A "hacker" spirit</li> <li>Good communication skills (oral and written)</li> </ul> <p><strong>Nice to have</strong></p> <ul> <li>Previous experience in a Cyber Security company</li> <li>WebAssembly experience</li> <li>Compilers experience</li> </ul> <h3><strong>What’s in it for you?</strong></h3> <ul> <li><strong>Flex Life:</strong> While we offer remote options our Parisian office is located next to the Opera Garnier. You will also receive a 500€ stipend to help you set up your ideal workspace. <ul> <li>If you are full remote, the SNCF dicount card is paid for you to come to our office to visit us & your team monthly!</li> </ul> </li> <li><strong>Generous Health Benefits:</strong> We have partnered with Kenko for your healthcare needs.</li> <li>A 100€ annual allowance is provided for a leisure activity of your choice in Sports or Culture.</li> <li>Annual allowance of €200 if you come to the office by bike to cover maintenance costs.</li> <li><strong>Professional Development</strong>: #Weaimhigh is part of our DNA, therefore we have invested in an internal Learning and Development platform and offer the opportunity to request additional training and support via your manager.</li> <li><strong>Events & Team building: #We care and we have fun!</strong> We organise Annual Company-Offsite, Events, Drinks, Winter Party, Lunch & Learns and much more are part of our Culture</li> <li><strong>PTO:</strong> Based on the country you are based from (e.g. 25 days in France).</li> </ul> <h3><strong>What are the next steps?</strong></h3> <ul> <li>You x Talent Acquisition Manager : first interview and cultural fit</li> <li>You x Engineering Manager : technical and cultural fit + Take-home technical challenge</li> <li>You x Team: Presentation and review of your "technical proposal" with the team</li> <li>You x Member of the leadership team - Discussion about DataDome vision and "raison d'être"!</li> <li>Now you really met everyone! Welcome to DataDome :)</li> </ul> <p>DataDome stops cyberfraud and bots in real time, outpacing AI-driven fraud from simple to sophisticated across your…