> Markdown version of [/jobs/ext/2070771-anti-bot-engineer](https://www.wearedevelopers.com/jobs/ext/2070771-anti-bot-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Anti-Bot Engineer - **Company:** Cloudflare - **Location:** Spain (Remote available) - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Computer Fonts, Burp Suite, Network Analysis, Computer Networks, Continuous Integration, Web Scraping, Cursor (Graphical User Interface Elements), Software Debugging, Firefox, Github, Python (Programming Language), Network Forensics, Node.Js, Open Source Technology, Akamai, Ruby, Reverse Engineering, Selenium, Wireshark, WebGL, WebRTC, Puppeteer (Software), Slack, Playwright, Cloudflare, Mitmproxy, GPT - **Published:** August 15, 2026 - **Apply:** https://es.trabajo.org/oferta-4112-acce824e4917367599e3a3d1dc40c179 ## About the Role don't need someone to assign tasks. You find the next problem to solve. Fluent in English, written and spoken. BSc or higher in CS or equivalent technical field. Required experience: Deep experience with Playwright, Puppeteer, or Selenium internals. Understanding of browser fingerprinting techniques and how to spoof them. Experience bypassing at least one major anti-bot system (Cloudflare, Akamai, DataDome, PerimeterX, etc.). Network traffic analysis (Wireshark, Burp Suite, mitmproxy, or similar). We're especially looking for: TLS and protocol fingerprinting experience (JA3, JA4, HTTP/2, HTTP/3 over QUIC). WebRTC fingerprinting and evasion. Chromium or Firefox source code familiarity. Experience at scale handling millions of requests. Running headless browsers stably at scale in containers, the part most people underestimate. Contributions to open-source evasion tools. What We Look For What makes a strong application: Tell us about the hardest anti-bot system ## Description isn't surface-level scraping. It's fingerprinting, TLS, CDP internals, browser behavior analysis. Fortune 500 Customers. Our API powers production workloads, not just experiments. Bootstrapped and Profitable. We answer to customers, not investors. We are searching for grinders who take ownership and move fast. You'll work on the hardest technical challenges in web scraping. Tech Stack Playwright, Puppeteer, raw CDP Ruby, Node.js, or Python for tooling Browser internals (Chromium, Firefox) Network analysis tools (Wireshark, Burp Suite, Proxyman) AWS infrastructure Ruby on Rails familiarity is a plus (we use it for internal tools) We use Cursor, Claude, ChatGPT, GitHub, and Slack daily. We ship multiple times a day with CI/CD. You Control AI, AI Doesn't Control You We ship faster because we use AI tools aggressively. Cursor and Claude. But you own the output. If you can't evaluate what AI produces, you're not ready for this role. What You'll Do Research and implement anti-bot evasion techniques. Reverse engineer bot detection systems. Understand how they work, then bypass them. Work with browser fingerprinting: canvas, WebGL, audio, fonts, navigator properties, and more. Debug TLS and protocol fingerprinting (JA3, JA4, HTTP/2, HTTP/3 over QUIC, header order and casing), and push the QUIC frontier where most detection and most scrapers haven't caught up yet. Optimize Playwright/Puppeteer configurations for stealth. Analyze network traffic to understand detection mechanisms. Build internal tools for testing and validating evasion techniques. Stay ahead of the latest developments in bot detection. Document findings and share knowledge with the team. You define the work. We don't have a task list for this role. You tell us what you'll work on based on what's broken, what's getting detected, and where you see opportunities. This is how much control you'll have. The Hard Parts This role is not for everyone. Here's what makes it hard: Cat and mouse game. What works today might not work tomorrow. You need to constantly adapt. Deep debugging. Sometimes you'll spend days figuring out why a single request gets blocked. Ambiguity. Anti-bot systems don't publish their detection methods. You reverse engineer and experiment. Pressure. When a major protection changes and customers are affected, you need to fix it fast. Lonely expertise. Few people understand this domain deeply. You'll often be figuring things out alone. If you want clear specifications and predictable work, this isn't for you. About You Obsessed with evasion. You've spent your own time trying to bypass protections. You find it fun. Hacker mindset. You enjoy reverse engineering and figuring out how systems work. Deep technical skills. Browser internals, networking, fingerprinting. Not surface-level knowledge. Persistent. You don't give up when something doesn't work. You try another approach. Great writer. You document your findings clearly so others can learn. Self-directed. You ## Related Videos - [ Evaluating AI models for code comprehension](https://www.wearedevelopers.com/videos/1462-evaluating-ai-models-for-code-comprehension) - [Coffee with Developers: David Heinemeier Hansson](https://www.wearedevelopers.com/videos/875-coffee-with-developers-david-heinemeier-hansson) - [Stack Overflow: Community and AI](https://www.wearedevelopers.com/videos/600-stack-overflow-community-and-ai) - [From clicks to cribs - How to find your dream home with web scraping](https://www.wearedevelopers.com/videos/767-from-clicks-to-cribs-how-to-find-your-dream-home-with-web-scraping) - [Speak, Code, Deploy: Transforming Developer Experience with Voice Commands](https://www.wearedevelopers.com/videos/1159-speak-code-deploy-transforming-developer-experience-with-voice-commands) - [WeAreDevelopers LIVE: Scammer Payback with Python, Grok Goes Unhinged, The Future of Chromium and mo](https://www.wearedevelopers.com/videos/1288-wearedevelopers-live-scammer-payback-with-python-grok-goes-unhinged-the-future-of-chromium-and-mo) ## Related Articles - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Dev Digest 131 - AI'm not sure about OSS](https://www.wearedevelopers.com/magazine/472-dev-digest-131-ai-m-not-sure-about-oss) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this) - [Dev Digest 113 - Debugging above the cloud](https://www.wearedevelopers.com/magazine/422-dev-digest-113-debugging-above-the-cloud)