About the Role
As a Vulnerability Defense Software Engineer within Cloudforce One, you will join Cloudflare's elite team dedicated to protecting our infrastructure and customers from the most sophisticated cyber threats. Cloudflare is committed to building a better and more secure Internet, and this role directly contributes to that mission by developing and implementing advanced defensive mechanisms. You will leverage your engineering expertise to identify, analyze, and mitigate vulnerabilities, working in a collaborative and transparent environment that values curiosity and relentless problem-solving. Your contributions will directly impact the security posture of a platform trusted by millions worldwide, adhering to the highest standards of integrity and accountability.
Responsibilities
- Research, design, and implement software solutions to detect and prevent vulnerabilities.
- Develop tools and automation to enhance our vulnerability management processes.
- Analyze security threats and vulnerabilities, and recommend appropriate mitigation strategies.
- Collaborate with security researchers and other engineering teams to integrate defense mechanisms.
- Participate in incident response activities related to vulnerabilities.
- Stay current with emerging threats, attack techniques, and defense technologies.
- Conduct security code reviews and provide guidance on secure coding practices.
Requirements
- 5+ years of experience in software engineering, with a strong focus on security.
- Proficiency in one or more programming languages (e.g., Go, Python, C/C++).
- Deep understanding of common vulnerabilities and attack vectors (e.g., OWASP Top 10).
- Experience with security tools and technologies (e.g., SIEM, IDS/IPS, WAF).
- Familiarity with operating system internals, networking protocols, and web security.
- Bachelor's degree in Computer Science, a related technical field, or equivalent practical experience.
Qualifications
- Experience with reverse engineering or malware analysis.
- Prior experience in a security red team or blue team role.
- Contributions to security research or open-source security projects.
- Relevant security certifications (e.g., OSCP, CEH).
Benefits
- Competitive pay, including equity ownership.
- Take-what-you-need vacation policy.
- Up to sixteen paid weeks of global parental leave.
- Comprehensive benefits package including healthcare, life insurance, short- and long-term disability, and pension plans.
- Commuter program for public transportation.
- Global wellbeing offerings including mental health, childcare, and family forming support.