Software Engineer, Trust & Safety

[Employer] is growing fast, and there are now over 4 million developers using it. We’re building tools that make email better for developers. We care about dependable infrastructure, thoughtful design, and the experience of everyone building with our products.

In this role you'll build the anti-abuse systems that keep [Employer] open for good senders and closed to bad actors: real-time enforcement on every email, detection pipelines that scale with the platform, and automations that go from detection to action without waiting on a human.

This role is fully remote based in Americas or European timezones, with some expected travel for team offsites, conferences, meetups, and more.

Read more about how we work, how we hire, and what we value here.

In this role, you will…

• Build and run the real-time enforcement layer within a latency budget of milliseconds
• Design pipelines that move from signal to decision to action, across sending, receiving and account activity
• Build the detection rules and policies that decide when we act, and make them safe to change
• Detect and contain account takeover and leaked API keys: notice when a trusted account stops acting like itself, and stop the damage without locking out the real owner
• Close the feedback loop: every block and every reversal carries a reason, so we can measure each detection's precision and retire the ones that hurt good senders
• Automate manual work such as investigations, appeals and bulk actions, so the team keeps up as volume grows
• Build and evaluate ML classifiers for spam and phishing, and prove their precision before they enforce anything
• Implement safeguards and make every action traceable through logs, metrics and audit trails
• Ensure all enforcement actions are traceable with logs, metrics, and audit trails

You’ll be a great fit if you…

• Bring 5+ years of software engineering experience
• Are fluent in writing and speaking English
• Have deep experience with Node.js, TypeScript, React (Hono, Next.js)
• Write Go, or want to, for latency-sensitive services
• Have infrastructure and reliability skills (AWS, CDK, Datadog)
• Are comfortable with APIs, event-driven architectures, queues and stateful services
• Design systems that fail safe, and treat a false positive as a bug
• Care deeply about observability: metrics, logs, tracing, error handling
• Take ownership across the stack, from frontend surfaces down to databases and queues
• Have proven experience with databases (Postgres, Redis)

You will be an exceptional fit if you also...

• Have worked in trust and safety, fraud or security
• Have built real-time enforcement such as rate limiting, or a rules engine on a policy language like CEL
• Have shipped ML or LLM-based detection in production, and know how to measure its precision and recall
• Know email: SPF, DKIM, DMARC, bounces, complaints, and how phishing campaigns work
• Have knowledge of database performance tuning (Postgres, Redis)

What it means to join the team:

• Room to shape technical decisions and take projects from discovery through production
• Work remotely with teammates around the world
• Close collaboration with the developers who use what you build
• Teammates who value thoughtful feedback, shared learning, and care for each other
• A high bar for product quality, reliability, and the details that make software enjoyable to use
• Comp: $150,000 - $175,000 USD, commensurate with location and experience

Learn more about how we work:

• Our philosophy for anti-abuse
• $3M to make email safer
• Revoking leaked API keys with GitHub secret scanning

About [Employer]

We are building the modern email sending platform for developers. We care deeply about quality, craft, and the developer experience.

Our fully remote team of 50 spans 15 countries and counting. We're backed by a16z, Y Combinator, and others. Meet the humans →