资深软件工程师 - 网站防御
Staff Software Engineer - Site Defense
Reddit 是一个由社区组成的社区。它建立在共同的兴趣、热情和信任之上,是互联网上最开放和真实的对话场所。每天,Reddit 用户提交、投票并评论他们最关心的话题。拥有 100,000 多个活跃的社区,以及大约 1.3 亿的每日活跃独立访客,Reddit 是互联网上最大的信息来源之一。如需更多信息,请访问 www.redditinc.com。
Reddit 的 Transport 和 Site Defense 团队构建并运营全球最大网站之一的基础架构。这些团队负责请求如何进入 Reddit,服务如何发现并相互通信,流量如何在集群和云之间移动,以及 Reddit 如何抵御 DDoS 攻击、爬虫、机器人和其他不良流量。
我们正在寻找一名资深软件工程师加入 Reddit 基础设施组织中的 Site Defense 团队。Site Defense 负责在互联网规模上保护 Reddit——作为应对 DDoS 攻击、自动化滥用、大规模爬取和其他网络级威胁的第一道防线。这是一个高影响力的角色,位于分布式系统、网络、安全和应用机器学习的交汇点。你将设计并负责关键基础设施,以保护 Reddit 的数据免受大规模攻击。
你将:
- 设计、构建和运营高吞吐、低延迟的系统,以保护 Reddit 免受 DDoS 攻击、机器人和自动化滥用的影响。
- 分析、开发并演进 CDN、边缘和内部基础设施层的入口级防御。
- 构建系统,在每请求和每用户粒度上实时检测、评分并缓解恶意流量。
- 与基础设施团队紧密合作,并与安全和内部安全团队协作,平衡安全性、性能和用户体验。
- 指导初级工程师的职业成长。
- 为团队的 ML-at-Ingress 计划做出贡献,包括对流量分类、机器人检测和异常检测模型进行实验。
- 全程负责服务,包括设计、实现、值班和操作卓越性。
- 参与大规模网络或滥用事件的事件响应和事后分析。
你具备:
- 7 年以上构建和运营高吞吐、低延迟生产分布式系统的经验。
- 在一种或多种通用编程语言中的软件开发经验。
查看英文原文
Reddit is a community of communities. It’s built on shared interests, passion, and trust, and is home to the most open and authentic conversations on the internet. Every day, Reddit users submit, vote, and comment on the topics they care most about. With 100,000+ active communities and approximately 130 million daily active unique visitors, Reddit is one of the internet’s largest sources of information. For more information, visit www.redditinc.com.
Reddit's Transport and Site Defense teams build and operate foundational infrastructure behind one of the largest sites in the world. These teams own how requests enter Reddit, how services discover and talk to each other, how traffic moves across clusters and clouds, and how Reddit protects itself from DDoS attacks, scrapers, bots, and other undesired traffic.
We are looking for a Staff Software Engineer to join the Site Defense team within Reddit’s Infrastructure organization. Site Defense is responsible for protecting Reddit at internet scale—serving as the first line of defense against DDoS attacks, automated abuse, large-scale scraping, and other network-level threats. This is a high impact role that sits at the intersection of distributed systems, networking, security, and applied machine learning. You will design and own the critical infrastructure that safeguards Reddit’s data from large scale attacks.
You will:
- Design, build, and operate high-scale, low-latency systems that protect Reddit from DDoS attacks, bots, and automated abuse.
- Analyze, develop and evolve ingress-level defenses across CDN, edge, and internal infrastructure layers.
- Build systems to detect, score, and mitigate malicious traffic in real time at per-request and per-user granularity
- Partner closely within Infrastructure and with Security, and internal Safety teams to balance security, performance, and user experience
- Mentor junior engineers in their professional growth.
- Contribute to the team’s ML-at-Ingress initiatives, including experimenting with models for traffic classification, bot detection, and anomaly detection
- Own services end-to-end, including design, implementation, on-call, and operational excellence
- Participate in incident response and post-incident analysis for large-scale network or abuse events
You have:
- 7+ years of experience building and operating high throughput and low latency production distributed systems.
- Software development experience in one or more general purpose programming languages; Python, Go, Rust, Java, C++.
- Excellent communication skills to collaborate with a service-oriented team and company.
- Experience building and maintaining distributed, fault-tolerant distributed systems at scale
- Experience with networking fundamentals (HTTP, TLS, TCP/IP, proxies, CDNs, load balancing).
Nice to have:
- Experience with DDoS mitigation, WAFs, bot management, or abuse prevention systems.
- Experience with anti-abuse frameworks and bot scores (ReCaptcha, Datadome, Turnstile)
- Experience with browser fingerprinting frameworks (fingerprintJS, ThumbmarkJS)
- Familiarity with ML systems in production, especially real-time inference or feature pipelines.
Benefits:
- Comprehensive Healthcare Benefits and Income Replacement Programs
- 401k with Employer Match
- Global Benefit programs that fit your lifestyle, from workspace to professional development to caregiving support
- Family Planning Support
- Gender-Affirming Care
- Mental Health & Coaching Benefits
- Flexible Vacation & Paid Volunteer Time Off
- Generous Paid Parental Leave
#LI-Remote
Pay Transparency:
This job posting may span more than one career level.
In addition to base salary, this job is eligible to receive equity in the form of restricted stock units, and depending on the position offered, it may also be eligible to receive a commission. Additionally, Reddit offers a wide range of benefits to U.S.-based employees, including medical, dental, and vision insurance, 401(k) program with employer match, generous time off for vacation, and parental leave. To learn more, please visit https://www.redditinc.com/careers/.
To provide greater transparency to candidates, we share base salary ranges for all US-based job postings regardless of state. We set standard base pay ranges for all roles based on function, level, and country location, benchmarked against similar stage growth companies. Final offer amounts are determined by multiple factors including, skills, depth of work experience and relevant licenses/credentials, and may vary from the amounts listed below.
The base salary range for this position is:
$217,000—$303,900 USD
In select roles and locations, the interviews will be recorded, transcribed and summarized by artificial intelligence (AI). You will have the opportunity to opt out of recording, transcription and summarization prior to any scheduled interviews.
During the interview, we will collect the following categories of personal information: Identifiers, Professional and Employment-Related Information, Sensory Information (audio/video recording), and any other categories of personal information you choose to share with us. We will use this information to evaluate your application for employment or an independent contractor role, as applicable. We will not sell your personal information or disclose it to any third party for their marketing purposes. We will delete any recording of your interview promptly after making a hiring decision. For more information about how we will handle your personal information, including our retention of it, please refer to our Candidate Privacy Policy for Potential Employees and Contractors.
Reddit is proud to be an equal opportunity employer, and is committed to building a workforce representative of the diverse communities we serve. Reddit is committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If, due to a disability, you need an accommodation during the interview process, please let your recruiter know.