Anti Abuse Engineer

Supabase·RemoteRemotomid

En corto

→Ingeniero anti-abuso que detecta y responde a amenazas en una plataforma de desarrollo a gran escala.
→Trabajas con datos, alertas y sistemas automatizados para cerrar brechas de seguridad en tiempo real.
→El rol tiene cobertura global y prioriza la automatización y la respuesta rápida a ataques coordinados.

Experiencia con inglés para comunicaciones técnicas y documentación.

En ~1 minuto te damos: quién te entrevista, las preguntas probables con respuestas desde tu CV, y tu CV adaptado a esta vacante. Gratis, sin tarjeta.

🎧¿Llegás a la entrevista? Llevá el copiloto. Nuestra extensión escucha la entrevista en vivo y te muestra anclas de 3-4 palabras desde tu CV y tu preparación — mirás, conectás, hablás. Gratis. Ver la extensión →

¿Qué piden?

✓3+ años en seguridad operativa, confianza y seguridad o ingeniería anti-abuso.
✓Experiencia en triage de incidentes y gestión de casos de abuso en entornos multi-tenant.
✓Capacidad para escribir código y automatizar tareas de detección y respuesta.
✓Conocimiento práctico de telemetría de plataformas y análisis de patrones de comportamiento.
✓Habilidad para comunicar incidentes a usuarios y equipos internos con claridad.
✓Experiencia con sistemas de alerta, dashboards y herramientas de gestión de casos.

¿No cumplís todo? Es lo normal — tu dossier gratis te dice qué gaps tenés y cómo cubrirlos en la entrevista.

PostgresEdge FunctionsAuthStorageRealtimeVector SearchHackerOneInternal alerting pipelinesCase management systemsRunbooks

¿A quién escribirle en Supabase?

Tu dossier gratis identifica a las personas que te entrevistarían — con su background, qué valoran y cómo escribirles para destacar antes de aplicar.

ABOUT SUPABASE Supabase is the Postgres development platform, built by developers for developers. We provide a complete backend solution including Database, Auth, Storage, Edge Functions, Realtime, and Vector Search. All services are deeply integrated and designed for growth. ABOUT THE ROLE Supabase serves millions of developers on a shared, multi-tenant platform. At that scale, abuse is not an edge case — it is a continuous operational reality. Credential stuffing, free-tier compute abuse, API scraping, malicious project provisioning, and exfiltration attempts occur every day. We need someone who treats detection and response as a craft, and who can close the loop between signal, triage, and automated remediation. You will work directly with our Anti-Abuse Lead and embed with Platform Security and Product Security to build and operate the systems that protect Supabase and its customers from abuse at scale. This role sits inside the security org but operates at the intersection of security engineering, data analysis, and platform operations. This role provides follow-the-sun coverage alongside our existing Anti-Abuse and Platform Security team members. It is fully remote, with a strong preference for candidates based in APAC or the West Coast of the Americas. WHAT YOU’LL OWN ABUSE DETECTION & SIGNAL TRIAGE - Monitor Signals: Monitor inbound abuse signals across platform telemetry, HackerOne reports, support queues, and internal alerting pipelines. - Triage End-to-End: Triage abuse cases end-to-end, assessing severity and blast radius, classifying actor types, and routing to the correct response track. - Queue Ownership: Own the abuse case queue with clear SLAs to ensure no active threats age out without a definitive decision. - Pattern Recognition: Identify complex patterns across distinct cases that point toward coordinated campaigns or emerging attack techniques. INCIDENT RESPONSE & REMEDIATION - Lead Incidents: Lead response efforts for active abuse incidents, coordinating closely with Platform and Infrastructure teams to execute containment actions and drive remediation to closure. - Communications: Write clear, timely communications to affected users and internal stakeholders throughout the lifecycle of an incident. - Postmortems: Conduct thorough post-incident reviews, feeding findings back into detection rules, runbooks, and platform controls. - Runbook Maintenance: Maintain and improve incident runbooks to ensure response execution is consistent, scalable, and reproducible across time zones. DETECTION ENGINEERING & AUTOMATION - Tune Logic: Build and tune detection logic against platform telemetry and Supabase-native data sources, including Postgres query patterns, Edge Function invocations, auth anomalies, and storage abuse. - Reduce Toil: Automate repetitive triage and response actions to aggressively reduce manual toil, increase response speed, and improve consistency. - Platform Architecture: Contribute to the Anti-Abuse Platform architecture, optimizing the blocklist schema, the remediation action ladder (L1–L4), and enforcement pipelines. - Metrics & Fidelity: Instrument metrics for detection coverage and alert fidelity, closely tracking false positive rates, detection latency, and remediation time. TOOLING & PLATFORM IMPROVEMENT - Toolchain Operations: Maintain and improve the abuse operations toolchain, including case management systems, escalation workflows, and engineering reporting dashboards. - Proactive Security: Partner with Core Engineering to design and implement platform-layer controls that eliminate abuse vectors by design rather than by reactive response. - Enterprise Support: Support Supabase for Platforms (SfP) customers by operationalizing the centralized Anti-Abuse platform for enterprise-grade use cases. YOU MIGHT BE A GOOD FIT IF YOU - Have 3+ years of experience in a security operations, trust & safety, or abuse-focused engineering role

¿Buscando algo parecido?

Dejá tu email y te avisamos cuando salgan vacantes que coincidan con tu perfil.

No apliques sin prepararte

Investigamos quién te entrevista, adaptamos tu CV y te ensayamos en vivo — gratis la primera.