Application Security Engineer – Bot Intelligence and Traffic Analysis

The Security Engineer, Bot Intelligence & Traffic Analysis is a member of the Content Delivery & Engineering Tooling (CDET) team focused on understanding, analyzing, and improving how automated traffic interacts with eCommerce platforms.

The primary goal of this role is to act as a central analyst for bot-related activity—leveraging observability and monitoring tools to identify patterns, quantify impact, and provide actionable insights to senior engineers responsible for mitigation strategies.

This role will help improve site performance, protect customer experience, and strengthen bot management posture through data-driven analysis, tooling, and process development.

You will partner closely with Site Reliability Engineering (SRE), Security, and Engineering teams to ensure visibility into traffic behavior and enable effective decision-making related to bot management.

• Monitor and analyze web traffic to identify bot activity patterns using observability and monitoring tools (Splunk, Dynatrace, Full Story, etc.)
• Review traffic characteristics (request rates, session behaviors, geographic patterns, headers, etc.) to distinguish between legitimate users and automated traffic
• Investigate anomalies in traffic or performance that may be linked to bot activity and summarize findings
• Package insights into clear, actionable recommendations for senior engineers responsible for mitigation decisions
• Build and maintain dashboards, queries, and alerts to improve visibility into bot traffic trends and site impact
• Partner with senior engineers to document bot detection and mitigation processes, including playbooks and decision frameworks
• Support the ongoing optimization of CDN configurations (Fastly) by providing data-driven insights on traffic behavior
• Assist with ad hoc analysis related to performance degradation, traffic spikes, or security concerns
• Collaborate with cross-functional teams (SRE, Info Sec, Product, Analytics) to align on definitions, metrics, and priorities related to bot activity
• Create recurring reports that quantify bot impact (traffic volume, performance impact, conversion influence, etc.)
• Explore opportunities to leverage AI and automation to streamline traffic analysis and bot identification workflows
• Contribute to the development of internal tools, scripts, or agents (e.g., AI-driven assistants) to automate analysis, reporting, or alerting workflows
• Maintain documentation of tools, processes, queries, and data sources to support team knowledge sharing and scalability

• 3+ years of experience in web analytics, observability, site reliability, or a related engineering, security, or analysis role
• Experience working with monitoring and observability tools such as Splunk, Dynatrace, Full Story, or similar platforms
• Strong analytical mindset with the ability to interpret large datasets and identify patterns or anomalies in traffic behavior
• Experience creating dashboards, alerts, queries, and reports to support operational decision-making
• Understanding of web traffic concepts (HTTP requests, headers, sessions, caching, CDN behavior, etc.)
• Familiarity with Content Delivery Networks (CDNs), preferably Fastly or similar platforms
• Working knowledge of Git-based repositories (Git Lab preferred) and basic scripting or query languages
• Ability to clearly communicate findings and recommendations to both technical and non-technical stakeholders
• Strong documentation skills, with experience creating process guides, playbooks, or technical documentation
• Experience collaborating with engineering teams to triage and prioritize issues
• Proactive mindset with a strong desire to investigate problems, understand impact, and improve processes
• Interest in emerging technologies, including AI and automation, and how they can enhance operational workflows
• Bachelor’s degree in Computer Science, Information Systems, or a related field, or equivalent experience preferred

• Experience analyzing or working with bot management, fraud detection, or security-related traffic patterns
• VCL (Varnish Configuration Language)
• Exposure to CDN rule configuration, WAFs, or traffic filtering concepts
• Understanding of CI/CD tools such as Git Lab and Terraform
• Experience building or contributing to AI/ML or automation initiatives
• Familiarity with eCommerce performance metrics and customer experience KPIs