Cloudflare Security Engineer

About the role

The Cloudflare Security Engineer secures, optimizes and maintains Cloudflare's security platform so that web applications stay protected, perform well and remain available against evolving cyber threats. The role needs strong hands-on expertise in Cloudflare security products, especially WAF, DDoS protection, rate limiting and firewall rules, and a solid grasp of web application security, threat detection, incident response and security operations.

Key responsibilities

• Review, optimize and maintain Cloudflare WAF rulesets to improve security while reducing false positives.
• Configure, manage and fine-tune DDoS protection policies and mitigation strategies.
• Design, implement and optimize rate limiting rules to protect against abuse and automated attacks.
• Monitor security events and traffic patterns, and recommend improvements based on threat intelligence.
• Investigate web application attack incidents and work with internal teams on remediation.
• Develop and maintain SOC runbooks and playbooks for Cloudflare-related events and incident response.
• Work with infrastructure, DevOps and application teams to apply security best practices.
• Manage Cloudflare Firewall Rules and related security configurations, and keep up with product enhancements.

Required profile

• At least 3 years of hands-on experience with Cloudflare security products and platform administration.
• Strong expertise in WAF, DDoS protection, rate limiting and firewall rules, including tuning WAF rules to reduce false positives.
• Experience building and maintaining SOC playbooks and incident response runbooks.
• Solid understanding of HTTP/HTTPS, TLS, DNS, CDN and web application architectures.
• Experience monitoring security events, analyzing traffic and investigating web application security incidents.
• Strong analytical, troubleshooting and problem-solving skills, and ability to collaborate with infrastructure, DevOps, application and security operations teams.

Preferred qualifications

• Experience with Google Cloud Platform security and networking, and familiarity with cloud-native security services.
• Experience integrating Cloudflare with SIEM and security monitoring platforms.
• Knowledge of Infrastructure as Code (IaC) and Terraform for Cloudflare configuration.
• Certifications such as Security+, GSEC, CISSP, CCSP or Cloudflare certifications.