Senior Software Engineer (Anti-Abuse & Security)

Join Replit's Anti-Abuse team as a Senior Software Engineer, where you'll be on the front lines defending the platform from exploitation. You'll work on unique AI-native problems, build detection systems, and automate responses to stay ahead of attackers. This remote-first position offers flexible work hours, comprehensive benefits, and the opportunity to apply AI to security challenges in a production environment.

• Concevoir et mettre en œuvre des garde-fous pour les modèles de langage (LLM) qui détectent les scénarios d'abus dans le code généré par l'IA et les interactions des agents.
• Construire des systèmes de détection alimentés par l'IA qui utilisent les LLM pour identifier les modèles malveillants, classifier les menaces et automatiser les décisions de réponse.
• Posséder l'ensemble du cycle de vie de la réponse aux abus : détection, enquête, application et gestion des appels en collaboration avec le support et le juridique.
• 4+ years of experience in security engineering, anti-abuse, trust & safety, or fraud detection
• Familiarity with prompt injection, jailbreaking, and other LLM-specific attack vectors
• Familiarity with common attack patterns: phishing infrastructure, account takeover, credential stuffing, resource abuse
• Experience with SQL and data analysis at scale (BigQuery, Snowflake, or similar)
• Ability to investigate complex abuse patterns and translate findings into automated defenses
• Experience building or fine-tuning ML/LLM-based classifiers for security or abuse detection
• Strong programming skills in Python and/or TypeScript for building detection systems and automation
• Clear communication skills for working across Security, Support, Legal, and Engineering teams
• Experience at a platform company dealing with user-generated content or compute abuse (hosting providers, cloud platforms, developer tools)
• Background in fraud detection, payment abuse, or financial crime
• Experience with CI/CD security tooling (SAST, SCA, Dependabot, Snyk)
• Familiarity with device fingerprinting, IP reputation, and email validation services
• Knowledge of container security, Linux internals, or cloud infrastructure (GCP preferred)
• Prior work with abuse reporting pipelines, trust & safety tooling, or content moderation systems