Product Security Engineer
Cloudflare2 months ago
Responsibilities
- Build AI-driven tools and scripts that automate code analysis, optimize vulnerability triage, and streamline Product Security workflows
- Conduct structured security reviews and threat modeling sessions, including STRIDE, for product features
- Verify, route, track, and drive remediation of product security findings within established SLAs
- Technically triage and validate external Cloudflare Bug Bounty submissions, including exploitability and business-risk assessment
- Support internal and external penetration tests by reviewing findings and helping development teams remediate issues
- Collaborate with DevOps, product, and software engineering teams as a security point of contact and promote secure coding practices
Requirements
- At least 5 years of Product or Application Security experience in large-scale distributed cloud environments or SaaS platforms
- Hands-on experience building production-grade automation scripts and tools using AI/LLMs
- Knowledge of threat modeling methodologies and security risk analysis
- Experience tracking, routing, and driving software vulnerability remediation across engineering teams against defined SLAs
- Ability to communicate technical security risks and collaborate effectively with software engineers
- Experience conducting academic or vulnerability research focused on systems security is desirable
- Familiarity with exploitation techniques, fuzzing frameworks, or automated scanning utilities is a bonus
- Experience scaling crowdsourced security programs such as HackerOne or Bugcrowd, optimizing JIRA workflows, or integrating hardware security features into production code bases is a bonus
Benefits
- Medical/Rx, dental, and vision insurance
- Flexible spending and commuter spending accounts
- Fertility and family-forming benefits
- On-demand mental health support and Employee Assistance Program
- Global travel medical insurance
- Short- and long-term disability insurance, life and accident insurance
- 401(k) retirement savings plan and employee stock participation plan
- Flexible paid time off and parental, pregnancy health, medical, and bereavement leave programs
- Available in Austin, Texas; applicants reaching the offer stage may be asked to attend an in-person interview at a Cloudflare office or hub
Tech Stack
Cloudflare
Categories
About Cloudflare
Cloudflare builds a global network that provides CDN, DDoS mitigation, DNS, Zero Trust security, and developer/edge computing tools for organizations of all sizes. It sells subscriptions to its cloud-based platform and usage-based services that protect and accelerate web sites, APIs, and corporate networks, plus serverless apps via Workers. Founded in 2009 and headquartered in San Francisco, it is a public company traded on the NYSE (ticker: NET).