Job Description
Polus provides identity and contact data to enterprise clients through APIs and bulk delivery. This role detects and stops misuse of that data credential sharing, reselling access, scraping, queries that fall outside a client s permitted purpose, and automated harvesting. You ll build the detection systems, not just monitor them. The work is behavioral analysis at scale finding the few accounts whose usage patterns don t match their stated business, and turning those findings into enforced controls.
Key Responsibilities
Build and maintain detection logic over high-volume API request logs and usage data in SQL and PySpark.
Develop behavioral baselines per client and per account, and flag deviations such as query velocity, search-pattern shape, geographic spread, and credential reuse.
Investigate flagged activity end to end and write clear findings for account management and compliance.
Turn confirmed abuse patterns into automated rules (rate limits, blocks, and alerts), working with the API platform team.
Measure detection quality through false positive rates, time to detect, and coverage, and tune accordingly.
Maintain a library of known abuse typologies and the signals that identify each.