Product Security Engineer
Cloudflare3 months ago
Responsibilities
- Build AI-driven tools and scripts to automate code analysis, initial triage, data enrichment, and Product Security workflows.
- Conduct structured security reviews and threat modeling sessions, including STRIDE, for product features.
- Manage product vulnerability findings by verifying issues, assigning engineering ownership, and tracking remediation against SLAs.
- Technically triage and validate external Bug Bounty submissions, assessing exploitability and business risk.
- Support internal and external penetration tests by reviewing findings and helping development teams remediate vulnerabilities.
- Collaborate with DevOps, product, and software engineering teams as a security point of contact and promote secure coding practices.
- Identify manual-process bottlenecks and improve Product Security, Vulnerability Operations, and internal AI tooling at scale.
Requirements
- 5+ years of Product Security or Application Security experience in large-scale distributed cloud environments or SaaS platforms.
- Hands-on experience building production-grade automation scripts and tools using AI and LLMs to solve operational or technical challenges.
- Competence in threat modeling methodologies and evaluating code flaws for engineering and security impact.
- Experience tracking, routing, and driving software vulnerability remediation across engineering teams against defined SLAs.
- Strong cross-functional collaboration and communication skills, including explaining technical security risks to software engineers.
- Experience with academic or vulnerability research focused on systems security is desirable.
- Familiarity with exploitation techniques, fuzzing frameworks, or automated scanning utilities is a bonus.
- Experience scaling crowdsourced security programs such as HackerOne or Bugcrowd, or optimizing project-management workflows in JIRA, is a bonus.
- Experience integrating hardware security features into production code bases is a bonus.
Benefits
- Medical/Rx, dental, and vision insurance.
- Flexible spending and commuter spending accounts.
- Fertility and family-forming benefits, on-demand mental health support, Employee Assistance Program, and global travel medical insurance.
- Short- and long-term disability, life and accident insurance, 401(k) retirement savings, and an employee stock participation plan.
- Flexible paid time off and leave programs including parental, pregnancy health, medical, and bereavement leave.
- Role is based in Austin, Texas; candidates progressing to the offer stage may be asked to attend an in-person interview at a Cloudflare office or hub.
- The position is eligible to participate in Cloudflare’s equity plan.
Tech Stack
Cloudflare
Categories
About Cloudflare
Cloudflare builds a global network that provides CDN, DDoS mitigation, DNS, Zero Trust security, and developer/edge computing tools for organizations of all sizes. It sells subscriptions to its cloud-based platform and usage-based services that protect and accelerate web sites, APIs, and corporate networks, plus serverless apps via Workers. Founded in 2009 and headquartered in San Francisco, it is a public company traded on the NYSE (ticker: NET).