Product Security Engineer

Position:
New Product Security Engineer

Company:
Cloudflare

Location:
United States, Austin, TX

Employment type:
Hybrid

Short Summary:
As a Product Security Engineer, you will support security assessments and vulnerability operations for Cloudflare’s core software products, analyzing system architecture, threat modeling new features, and ensuring product-related security findings are triaged and mitigated.

Responsibilities:
- Implement AI Security Solutions: Identify process bottlenecks and build AI-driven tools or scripts to automate code analysis and streamline workflows.
- Security Reviews & Threat Modeling: Conduct structured security reviews and threat modeling sessions across product features.
- Product Vulnerability Management: Manage the lifecycle of product security findings, ensuring vulnerabilities are verified and tracked to mitigation.
- Bug Bounty Triage: Perform technical triage and validation of external Bug Bounty submissions.
- Pentest Coordination: Support penetration testing engagements and assist development teams with remediation strategies.
- Engineering Collaboration: Partner with DevOps and product teams to implement secure coding practices.

Requirement:
- 5+ years of experience in Product or Application Security within large-scale distributed cloud environments or SaaS platforms.
- Demonstrated ability to build production-grade automation scripts and tools.
- Competency in threat modeling methodologies and evaluating code flaws.
- Experience tracking and driving the remediation of software vulnerabilities.
- Strong collaboration and communication skills.

Benefits:
- Medical/Rx Insurance
- Dental Insurance
- Vision Insurance
- Flexible Spending Accounts
- On-demand mental health support
- 401(k) Retirement Savings Plan
- Flexible paid time off covering vacation and sick leave
- Leave programs, including parental and bereavement leave