Senior Product Security Engineer - Cloudflare

About the Role

As a Senior Product Security Engineer, you will lead security assessments and vulnerability operations for Cloudflare’s core software products. You will analyze system architecture, threat model new features, and ensure that security findings are triaged, routed, and mitigated within SLAs.

This role sits at the intersection of Product Security, Vulnerability Operations, and internal AI Tooling. You will build tools using AI/LLMs to automate triage and data enrichment, helping the team scale security workflows.

Responsibilities

• AI Security Innovation: Architect and deploy AI-driven solutions to automate code analysis and optimize security workflows.
• Security Architecture: Lead deep-dive security reviews and threat modeling sessions for distributed systems.
• Vulnerability Management: Own the lifecycle of product security findings, ensuring accurate triage and remediation.
• Bug Bounty Leadership: Oversee technical triage and validation of external bug bounty submissions.
• Pentest Strategy: Shape the scope of internal and external penetration testing engagements.
• Mentorship: Act as a force-multiplier by mentoring junior engineers and cultivating security champions.

Desirable Skills & Experience

• Product/AppSec Expertise: Extensive experience in Product or Application Security within large-scale distributed cloud or SaaS environments.
• AI & Automation: Proven ability to build production-grade automation scripts and leverage AI/LLMs for technical challenges.
• Risk Analysis: Mastery of threat modeling methodologies (e.g., STRIDE) and translating theoretical risks into business context.
• Communication: Strong leadership skills to influence engineering teams and resolve ownership ambiguity.

Benefits

• Comprehensive health, dental, and vision insurance.
• 401(k) retirement savings plan and employee stock participation.
• Flexible paid time off and generous leave programs.
• Fertility, family forming, and mental health support.