Job
- Level
- Senior
- Location
- Berlin
- Working Model
- Hybrid, Onsite
- Job Field
- IT, Security, Back End
- Employment Type
- Full Time
- Contract Type
- Permanent employment
Job Summary
In this role, you ensure user data protection with technical safeguards, develop user-friendly safety features, and closely collaborate with the moderation team to identify and mitigate threats early on.
Job Technologies
Your role in the team
- Your mission is to keep our users safe: with technical safeguards built into our platform and API, with product features that help neighbours protect themselves, and in close partnership with our Community Management team.
- You prioritize security in everything you do. You ask how someone could compromise the trust of our users, and you prevent it before it happens. At the same time, you think in terms of products, not just backend systems: a well-placed warning in the interface, a clear reporting flow, or a safer default setting often protects more people than another rule on the server.
- Build safety into the platform
- You will be the first hire in a new team of three, safeguarding our users. Becoming a team lead is an option.
- Design and implement technical safeguards in our API and backend: abuse detection, rate limiting, verification checks, and the signals that catch fake accounts and scams early.
- Ship user-facing safety features. Reporting flows, warnings on suspicious messages, blocking and privacy controls, safer defaults. Safety that users can see and use.
- Threat-model new features before they ship. Ask how a bad actor would abuse them, and design the friction and detection against it.
- Assess and implement third-party integrations to improve our way of working with threats.
- Think security first
- Bleiben Sie auf dem Laufenden, wie sich Angriffe auf sozialen Plattformen entwickeln: Kontenübernahmen, Fake-Accounts, Romance- und Marketplace-Betrügereien, Phishing und QR-Fallen, Spam-Ringe, koordinierte Belästigungen.
- Lead the response when something is spreading or someone is at risk: decide, act, then close the route it came through.
- Decide what we build ourselves and what we buy. Where the market already solves a problem, such as content scanning, evaluate it, buy it and integrate it. Build where the problem is specific to nebenan.
- Work as one with Community Management
- Our moderation team handles cases day to day. You build the tooling and the standards they work with, so the highest-risk cases move first and similar cases get similar outcomes.
- Turn what moderation learns into product and platform improvements, and turn platform signals into better moderation decisions.
- Halten Sie uns regelkonform, mit Nachweisen
- Own the platform-side obligations under the Digital Services Act and GDPR: notice and action, statements of reasons, complaint mechanisms, transparency reporting. Keep the evidence audit-ready as you go. Legal owns the interpretation; you make the platform meet it.
- Measure safety honestly: how much harm actually reaches users, how fast we act, and how accurate our decisions are.
This text has been machine translated. Show original
Our expectations of you
Qualifications
- A security-first mindset: you threat-model by instinct, probe how features can be abused, and stay current on attack vectors against social networks
- Strong SQL and a real understanding of how databases behave; you can find an abuse pattern in the data yourself
- A solid understanding of client-server architecture: what the client can and cannot be trusted with, where the actual risks lie, and how an API behaves under attack
- Infrastructure fluency: AWS, logging, observability, queues. You can reason about a system under attack, not only under load.
- A user- and product-centric view: you care how safety feels in the interface, and you are comfortable shaping frontend features that help users stay safe
- Works well with non-engineers: moderators, product, legal. You can explain a technical risk in plain language and take a moderation insight back into code.
- Judgment under pressure: you keep users' safety and freedom in balance, and you decide quickly when someone may be at risk
- Uses AI deliberately as leverage: directs and reviews generated code to production quality
- Excellent English skills for working in our international team
- If you are not full-stack yet, you want to move into that direction and learn other stacks.
- A plus: German language and German-market moderation context
- A plus: a security background in threat modelling, incident response or offensive security
Experience
- Solid Ruby on Rails experience in production.
- A plus: hands-on experience of a fraud, scam or impersonation wave at scale
- A plus: experience selecting and integrating vendor tooling in a safety or security stack
This text has been machine translated. Show original
What we offer
- Hybrid work model combining office and remote days
- A meaningful job - we're creating a great product with real added value for the community
- Work in a cheerful and experienced team that exchanges ideas and learns from each other
- Insights into the entire work process of our social startup and the nebenan.de foundation
- Verantwortung und großartige Möglichkeiten, aktiv beizutragen
- Your nebenan.de SpenditCard - you'll receive an additional income of 35 Euros per month, which you can use for things of your choice
- 30 days of vacation per year - we also offer the possibility of workation models and a sabbatical
- A workplace in Berlin-Kreuzberg and regular events like yoga or Lunch & Learn sessions.
This text has been machine translated. Show original
Benefits
Work-Life-Integration
Topics You Will Work On
Job Locations
About Your Employer
Good Hood GmbH
Good Hood GmbH, based in Berlin, operates the neighborhood platform nebenan.de, which supports local exchange and sharing of items within communities. As a social enterprise, Good Hood GmbH places great importance on social impact and sustainable business practices.
Description
- Company Type
- Startup
- Working Model
- Hybrid, Onsite
- Industry
- Internet, IT, Telecommunication
Senior Ruby Engineer Trust & Safety
- Location
- Berlin
- Working Model
- Hybrid, Onsite
- Diversity
- Open for all genders
