Security Software Engineer: Anti-Abuse/Trust & Safety

beehiiv

23d•$160,000 - $180,000

About The Position

beehiiv is where the world's best newsletters, podcasts, and digital products are built, grown, and distributed. The platform combines email, podcast hosting, websites, community, and digital products — connected to a single audience and a single set of tools to publish, grow, and monetize. As we approach $50M in annualized revenue and continue to grow 100% YoY, our rapidly growing product suite and incredibly strong brand positions us for the next stage of hypergrowth. As a Security Software Engineer specializing in Anti-Abuse, you will play a critical role in protecting our platform and users from malicious and fraudulent activity. You will work in a small, focused team, collaborating directly with our existing Trust & Safety Software Engineering Team to design, build, and maintain our anti-abuse systems. This is a hands-on technical role for someone with a passion for both software engineering and digital security.

Requirements

5–8+ years of professional software engineering experience
Experience with Ruby on Rails or similar MVC backend frameworks
Experience with modern test frameworks (e.g., Playwright, Cypress, Jest, Selenium, Rspec)
Solid understanding of full-stack web architectures and how systems behave in production
Strong technical judgment and a track record of owning systems over time
A quality-first mindset paired with pragmatism and delivery focus
Problem-solving and analytical skills: The ability to break down complex issues into manageable parts and identify the root cause of problems.
Abstract thinking: The capacity to think creatively and conceptually, especially when dealing with threats that are not yet well-defined.
Desire to solve hard problems: A persistent and resilient attitude toward challenges, seeking out difficult tasks rather than avoiding them.
A "hacker" mindset: The curiosity to understand how systems can be exploited and the ability to think like a malicious actor.
Solid understanding of fundamental computer networking concepts, including subnetting, DNS, and HTTP/S protocols.
Experience with security tools and technologies, such as WAF rules (e.g., Cloudflare), RECAPTCHA, and other anti-abuse systems.
Excellent communication: The skill to clearly explain complex technical issues to both technical and non-technical audiences.
Collaboration: The ability to work effectively in a small team, sharing knowledge and providing constructive feedback during code reviews.
Adaptability: The flexibility to switch between different projects and technologies as needed in a fast-paced environment.
Proactive approach: A forward-looking mindset to anticipate future threats and build preventative systems.
Threat Feed/Intelligence familiarity
Experience with enterprise fraud/security/kyc tools

Responsibilities

Develop and implement security and anti-abuse features in our core product.
Collaborate closely with our existing Trust & Safety Software Engineering Team on projects, strategy, and problem-solving.
Participate in and lead code reviews for security-related features, ensuring code quality and best practices.
Support the creation and improvement of machine learning models by assisting with the collation and preparation of training data.
Work with cross-functional teams to ensure new features are launched with robust anti-abuse and security measures.
Respond to and investigate security incidents and abuse reports.
Stay up-to-date with the latest security threats and anti-abuse techniques.
Implement third-party integrations or products into our production systems.