Cloudflare Security Engineer

About the role

We are looking for a Cloudflare Security Engineer to join our security team across major Pakistani cities. The role focuses on protecting web applications using Cloudflare’s suite of security products while reducing false positives and improving overall security posture.

Key responsibilities

• Review, optimize, and maintain Cloudflare WAF rulesets to balance security and usability.
• Configure and fine‑tune DDoS protection policies and mitigation strategies.
• Design and manage Rate Limiting rules to defend against abuse and automated attacks.
• Monitor Cloudflare security events, traffic patterns, and threat intelligence.
• Investigate web‑application security incidents and coordinate remediation with relevant teams.
• Develop and maintain SOC runbooks/playbooks for Cloudflare‑related incidents.
• Collaborate with Infrastructure, DevOps, and Application teams to embed security best practices.
• Stay current on Cloudflare product enhancements and recommend new capabilities.

Required profile

• Minimum 3 years of hands‑on experience with Cloudflare security products.
• Strong practical experience with Cloudflare WAF, DDoS protection, Rate Limiting, and firewall rules.
• Solid understanding of web‑application security, OWASP Top 10, and security analytics.
• Experience creating or maintaining SOC playbooks/runbooks.
• Good knowledge of HTTP/HTTPS, TLS, DNS, CDN, and modern web architectures.
• Analytical, troubleshooting, and incident‑response skills.

Required skills

• Cloudflare WAF
• DDoS Protection
• Rate Limiting
• Firewall Rules
• Security Analytics
• OWASP Top 10
• HTTP/HTTPS
• TLS
• DNS
• CDN
• Web application architecture