← All roles

Product Security Engineer

Cloudflare· Security
Apply on company site
Hybrid (Austin, TX; London, UK)full-timePosted 2mo ago

About the role

Security-focused Product Security Engineer role at Cloudflare, responsible for security assessments, vulnerability operations, threat modeling, and building AI-driven tooling to automate triage and data enrichment across Cloudflare’s core software products.

Responsibilities

  • Implement AI Security Solutions: Identify process bottlenecks and build AI-driven tools or scripts to help automate code analysis, optimize triage, and streamline Product Security workflows.
  • Security Reviews & Threat Modeling: Conduct structured security reviews and threat modeling sessions (e.g., STRIDE) across product features, defining security requirements early in the development lifecycle.
  • Product Vulnerability Management: Manage the operational lifecycle of product security findings. Ensure vulnerabilities are verified, mapped to the correct engineering owner, and tracked to mitigation in alignment with established SLAs.
  • Bug Bounty Triage: Perform the technical triage and validation of Cloudflare’s external Bug Bounty submissions, verifying exploitability and evaluating business risk.
  • Pentest Coordination: Support internal and external penetration testing engagements by reviewing findings, clarifying technical context, and assisting development teams with remediation strategies.
  • Engineering Collaboration: Partner closely with DevOps and product teams, acting as a reliable security point of contact and helping developers implement secure coding practices.

Qualifications

  • 5+ years of experience in Product or Application Security within large-scale distributed cloud environments or SaaS platforms.
  • Demonstrated ability to build production-grade automation scripts and tools. Hands-on experience leveraging AI/LLMs to solve operational or technical challenges.
  • Competency in threat modeling methodologies and the ability to evaluate code flaws to determine their engineering and security impact.
  • Experience tracking, routing, and driving remediation of software vulnerabilities across engineering groups while working against defined SLAs.
  • Strong collaboration and communication skills to clearly convey technical security risks to software engineers and resolve ownership ambiguity.

Skills

Required:AI/LLM tooling and automationThreat modeling (STRIDE)Vulnerability lifecycle managementSecurity collaboration

Benefits

  • Medical/Rx Insurance
  • Dental Insurance
  • Vision Insurance
  • Flexible Spending Accounts
  • Commuter Spending Accounts
  • Fertility & Family Forming Benefits
  • On-demand mental health support and Employee Assistance Program
  • Global Travel Medical Insurance
  • Short and Long Term Disability Insurance
  • Life & Accident Insurance
  • 401(k) Retirement Savings Plan
  • Employee Stock Participation Plan
  • Flexible paid time off
  • Parental, pregnancy health, medical, and bereavement leave
Last updated Sep 2, 2026. Interested? Apply on the company site.

About Cloudflare

Connect, protect, and build everywhere | Cloudflare

Make employees, applications and networks faster and more secure everywhere, while reducing complexity and cost.

NetworkingSecurityPerformanceDeveloper PlatformAI
Company profileWebsite

More open roles at Cloudflare