Anti Abuse Engineer

About the Company

Supabase is the Postgres development platform, built by developers for developers. We provide a complete backend solution including Database, Auth, Storage, Edge Functions, Realtime, and Vector Search.

Responsibilities

• Monitor inbound abuse signals across platform telemetry, HackerOne reports, and internal alerting pipelines
• Triage abuse cases end-to-end, assessing severity and classifying actor types
• Lead incident response efforts for active abuse incidents, coordinating containment and remediation
• Build and tune detection logic against platform telemetry and Postgres query patterns
• Automate repetitive triage and response actions to reduce manual toil
• Maintain and improve incident runbooks and the abuse operations toolchain
• Partner with Core Engineering to design platform-layer controls that eliminate abuse vectors

Requirements

• 3+ years of experience in security operations, trust & safety, or abuse-focused engineering
• Hands-on experience with detection logic, rule writing, and threshold tuning
• Proven ability to run incident response end-to-end (triage, containment, communication, and postmortems)
• Proficiency in SQL and a scripting language, preferably Python
• Deep familiarity with abuse techniques like credential stuffing, ATO, and compute abuse
• Ability to thrive in an async-first, globally distributed team environment

Preferred Qualifications

• Experience with Postgres, PostgREST, or Supabase platform internals
• Experience building or operating multi-tenant abuse detection platforms
• Familiarity with threat intelligence feeds and IOC enrichment pipelines
• Exposure to modern SIEM tooling such as Splunk or Datadog
• Experience managing HackerOne or Bugcrowd reports
• Working knowledge of SOC 2 or ISO 27001 compliance frameworks