Key skills
Trust & Safety EngineeringSecurity EngineeringFraud/Abuse PreventionBackend Programming - PythonBackend Programming - GoBackend Programming - Node.jsInternal Tooling DevelopmentCloud Platforms - AWSCloud Platforms - CloudflareData PipelinesSQLBigQueryRate LimitingFingerprintingBot DetectionMetricsAlertingOpenSearchDatadogCloudWatchRisk-based AuthenticationAbuse Detection HeuristicsCuriosityPythonGoAINode.jsAWSCloudflare
About this role
Webflow is building the world’s leading AI-native Digital Experience Platform, and they are seeking a Senior Trust & Safety Engineer to help prevent abuse at scale. This role focuses on building technical controls across authentication, account integrity, and core product to mitigate automated and coordinated attacks.
Responsibilities:
- Harden login and registration flows using risk-based controls such as rate limiting, behavioral signals, progressive friction, and automated mitigation
- Partner closely with Security and Engineering teams to identify and remediate abuse
- Develop internal Trust & Safety tooling that centralizes risk signals, improves investigation workflows, and automates enforcement actions
- Create and productionize abuse detection logic by translating adversarial patterns into scalable signals, metrics, and engineering controls
Requirements:
- BA/BS degree or equivalent experience
- 5–8 years of software engineering experience, with at least 2–3 years in trust & safety, security engineering, or fraud/abuse prevention
- Proficiency in one or more backend languages (Python, Go, Node.js, etc.)
- Experience building and maintaining internal tooling at scale
- Experience building and publishing applications on cloud platforms (AWS, Cloudflare, etc.)
- Familiarity with data pipelines and querying large datasets (SQL, BigQuery, etc.) to surface abuse patterns
- Experience with rate limiting, fingerprinting, bot detection, or similar abuse prevention primitives
- Experience implementing observability, metrics, and alerting (OpenSearch, Datadog, CloudWatch, etc.)
- Have a strong understanding of rate limiting and traffic shaping, risk-based authentication, abuse detection heuristics
- Have an ability to reason about adversarial behavior
- Are comfortable owning abuse prevention end-to-end
- Work effectively across security, product, and data teams
- Are comfortable with exposure to potentially harmful content
- Stay curious and open to growth — actively building fluency in emerging technologies like AI to unlock creativity, accelerate progress, and amplify impact