Threat Research Engineer Client Side - DataDome

⭐ About the team:

Made up of six subteams (Dashboard, Engine, Infrastructure, Integrations, Threat Research & Security), the DataDome tech team is spread across Europe and the US. We handle over 2 000 billion events per day giving responses within 3ms (99p). We are present in more than 29 data centers around the world, deployed using Docker.

We deploy on AWS, Scaleway and GCP, using Docker, Ansible and Terraform, and monitor with Grafana and Prometheus. We handle an average of  8 billion requests per day and manage more than 300 TB of data per month.

When it comes to our stack, we run real-time detection layer in Java, low latency Stream Engine running on Flink in Scala, ElasticSearch for storage, Kafka for communication between layers, HAProxy for load balancing, Symfony & Angular for our dashboards. While previous experience in cyber is not a must, we'll pair you with mentors who will help you bridge the gaps. As #growth is part of our DNA, we’ll give you the resources and support you need to develop mastery.

You will integrate the Threats Research team which is responsible for constantly improving the detection capabilities through client-side technologies.

Your goal will be to challenge and improve our detection capabilities.

👉 Responsabilities:

• Challenge our bot detection mechanisms to ensure we properly detect bots. Create tools to automate this process.
• Help detect bypasses proactively by analyzing different modules as well as potential misconfigurations on our customer websites
• Add new signals to our client-side scripts to collect browser fingerprints capable of detecting advanced bots
• Improve security and resilience of our JavaScript code by implementing obfuscation techniques to prevent reverse engineering
• Collaborate with mobile team to collect new signals in our SDK to improve mobile bot detection
• Collaborate with other member of the threat research teams as well as member of other teams to implement new approaches to improve bot detection
• Share your results externally using appropriate communication medium, such as meetups, conference talks, academic papers, blog posts

👤 It would be great if you have:

• At least 5 years of experience programming in JavaScript
• Strong computer science background
• Experience dealing with bots or malware
• Strong knowledge of web and network infrastructures
• Strong knowledge of web client side technologies
• A "hacker" spirit
• Good communication skills (oral and written)

Nice to have

• Previous experience in a Cyber Security company
• WebAssembly experience
• Compilers experience

What’s in it for you?

• If you are full remote, the SNCF dicount card is paid for you to come to our office to visit us & your team monthly!