Trust & Safety Lead (Technical)

You will keep nebeanan.de users safe with technical safeguards built into the platform and API, with product features that help neighbours protect themselves, and in close partnership with the Community Management team. This is a new team—you start hands-on as the only person on it, and will build it out into a small team of up to three.

What you'll do

• Design and implement technical safeguards in the API and backend: abuse detection, rate limiting, verification checks, and signals that catch fake accounts and scams early.
• Ship user-facing safety features: reporting flows, warnings on suspicious messages, blocking and privacy controls, safer defaults.
• Threat-model new features before they ship to prevent abuse.
• Hire and grow a small team of up to three, and lead it while staying technical and shipping yourself.
• Set the standards the team works to and make trust and safety visible across the company.
• Stay current on attack vectors against social platforms and lead response when something is spreading or someone is at risk.
• Build tooling and standards for the moderation team so highest-risk cases move first and similar cases get similar outcomes.
• Own platform-side obligations under the Digital Services Act and GDPR: notice and action, statements of reasons, complaint mechanisms, transparency reporting.

What you'll need

• Several years of experience building and operating production web platforms, ideally with focus on trust and safety, anti-abuse, fraud prevention or application security.
• Solid Ruby on Rails experience in production, or clear evidence you pick up a new language and ecosystem fast and well.
• Strong SQL and real understanding of how databases behave; you can find abuse patterns in data yourself.
• Firm grasp of client–server architecture: what the client can and cannot be trusted with, where the risk actually lives.
• Infrastructure fluency: AWS, logging, observability, queues.
• Security-first mindset: you threat-model by instinct and stay current on attack vectors.
• User- and product-centric view: you care how safety feels in the interface and are comfortable shipping frontend features (React and TypeScript).
• Works well with non-engineers: moderators, product, legal. You explain technical risk in plain language.

Nice to have

• German language and German-market moderation context.
• Hands-on experience of a fraud, scam or impersonation wave at scale.
• Experience selecting and integrating vendor tooling in a safety or security stack.
• Security background in threat modelling, incident response or offensive security.

What they offer

• Hybrid work model combining office and remote days.
• 30 days of vacation per year, workation models and sabbatical options.
• nebenan.de SpenditCard: 35 Euros per month for things of your choice.
• Workplace in Berlin-Kreuzberg with regular yoga and Lunch & Learn sessions.