Software Engineer, Trust & Safety

Role overview A software engineering role focused on protecting a developer-facing email platform from abuse at scale. The position sits at the intersection of real-time systems, security, and product reliability, building the detection and enforcement layer that keeps legitimate senders flowing while stopping bad actors. It is a fully remote position for candidates based in American or European time zones, with occasional travel for team gatherings and industry events.

Responsibilities - Build and operate a real-time enforcement layer that processes every email within a tight millisecond latency budget. - Design end-to-end pipelines that turn raw signals into decisions and actions across sending, receiving, and account activity. - Author detection rules and policies, and make them safe to evolve without regressions. - Detect and contain account takeover attempts and leaked API keys, including distinguishing trusted-account behavior from compromise without locking out legitimate owners. - Attach reasons to every block and reversal so detection precision can be measured and weak signals retired. - Automate investigations, appeals, and bulk actions, and produce ML-based classifiers for spam and phishing with measured precision before they enforce anything. - Make every enforcement action traceable through structured logs, metrics, and audit trails.

Requirements - Five or more years of professional software engineering experience. - Professional fluency in written and spoken English. - Deep hands-on experience with Node.js, TypeScript, and React, plus familiarity with frameworks such as Hono and Next.js. - Working knowledge of Go, or strong willingness to learn it for latency-sensitive services. - Infrastructure and reliability skills on AWS, including CDK and observability tooling such as Datadog. - Comfort with APIs, event-driven architectures, queues, and stateful services, plus practical experience with Postgres and Redis. - A safety-first design mindset that treats false positives as bugs, plus strong habits around observability and end-to-end ownership across the stack.

Nice to have - Prior work in trust and safety, fraud, or security. - Experience building real-time enforcement such as rate limiters or rule engines on a policy language like CEL. - Production experience shipping ML- or LLM-based detection, including measuring precision and recall. - Working knowledge of email fundamentals, including SPF, DKIM, DMARC, bounce handling, complaint feedback, and phishing campaign patterns. - Database performance tuning for Postgres and Redis.

Benefits and work setup - Fully remote work with teammates distributed across many countries. - Room to shape technical decisions and carry projects from discovery through production. - Close collaboration with the developers who actually use the platform. - A culture that emphasizes thoughtful feedback, shared learning, and mutual care. - A high bar for product quality, reliability, and craft. - Compensation of $150,000 to $175,000 USD, adjusted for location and experience.