Principal Engineer - Cloudforce One
Cloudflare2 months ago
Responsibilities
- Drive architectural direction and technical strategy across Cloudforce One engineering, including Kubernetes services, Workers, D1, and Cloudflare’s global network.
- Replace technical bottlenecks, legacy patterns, and architectural debt with faster, more reliable systems.
- Design and build large-scale data pipelines and services that collect, enrich, analyze, and expose threat intelligence and abuse signals.
- Work across threat intelligence platforms, abuse detection systems, legal response tooling, and customer-facing security products.
- Apply threat-informed engineering judgment to account for adversary adaptation, degrading detection rules, and evolving attack techniques.
- Collaborate with Threat Intelligence, Trust & Safety, Product, Legal, and engineering teams on scalable security and compliance solutions.
- Mentor engineers and raise standards for code quality, system design, operational rigor, and security-first thinking.
- Develop agentic AI workflows and AI-assisted development practices for threat hunting, detection engineering, and abuse investigation.
- Own operational excellence, including on-call participation and incident response.
Requirements
- 15+ years of cybersecurity experience, focused on building systems for presenting adversarial trends and techniques.
- 10+ years of experience building and operating large-scale distributed systems in production, including complex architecture and design.
- Hands-on production proficiency in Go and/or TypeScript, with experience deploying services in Kubernetes and on edge platforms such as Cloudflare Workers and D1/SQLite-at-the-edge.
- Subject matter expertise in threat intelligence, adversarial analysis, or detection engineering, including the Cyber Kill Chain, TTP tracking, and attacker infrastructure analysis.
- Ability to lead technical initiatives across multiple teams, codebases, and problem domains.
- Experience with AI-assisted development and agentic AI workflows.
- Experience designing and operating critical data pipelines and using SQL databases and caching layers at scale.
- Excellent communication skills and strong architectural judgment.
- Track record of fundamentally improving team, system, or organizational operations.
- Bonus experience in Trust & Safety or platform abuse, including phishing detection, malware analysis, fraud prevention, or content moderation.
- Bonus proficiency writing detection rules with YARA, Snort, or similar languages.
- Experience analyzing web-based threat vectors and phishing obfuscation techniques.
- Familiarity with Rust, Terraform, DNS, TLS/SSL, HTTP, and web security standards.
- Experience building threat intelligence platforms, IOC distribution systems, automated mitigation pipelines, or React-based internal and analyst-facing tools.
Benefits
- Medical/Rx insurance, dental insurance, and vision insurance
- Flexible Spending Accounts and Commuter Spending Accounts
- Fertility and family-forming benefits
- On-demand mental health support and Employee Assistance Program
- Global Travel Medical Insurance
- Short- and long-term disability insurance and life and accident insurance
- 401(k) Retirement Savings Plan and Employee Stock Participation Plan
- Flexible paid time off covering vacation and sick leave
- Parental, pregnancy health, medical, and bereavement leave programs
- Austin, Texas location with possible in-person interview attendance; the role may require on-call flexibility outside standard working hours
Tech Stack
Categories
About Cloudflare
Cloudflare, Inc. (NYSE: NET) is the leading connectivity cloud company. It empowers organizations to make their employees, applications and networks faster and more secure everywhere, while reducing complexity and cost. Cloudflare’s connectivity cloud delivers the most full-featured, unified platform of cloud-native products and developer tools, so any organization can gain the control they need to work, develop, and accelerate their business. Powered by one of the world’s largest and most interconnected networks, Cloudflare blocks billions of threats online for its customers every day. It is trusted by millions of organizations – from the largest brands to entrepreneurs and small businesses to nonprofits, humanitarian groups, and governments across the globe.