← All roles

AI Security Research & Red Team Engineer

Cloudflare· Security
Apply on company site
Hybrid (Multiple Cloudflare offices / remote)$166k - $208khybridPosted 2mo ago

About the role

Hybrid role focused on AI security research, adversary simulation, and red team activities to improve Cloudflare’s security posture with emphasis on AI, agents, and LLMs.

Responsibilities

  • AI Security and Vulnerability Research: Stay current with emerging threats and perform deep-dive research to identify AI-specific vulnerabilities and risks in addition to general vulnerabilities across Cloudflare’s products and services.
  • Agentic testing and adoption: Identify AI-related attack surfaces through rigorous testing of agentic implementations and LLM usage to define requirements and implementation guidance.
  • Adversary Simulation: Execution of full-chain red team operations targeting Cloudflare’s global infrastructure, corporate networks, and product ecosystems.
  • Efficacy Testing: Establish a framework for testing Security Efficacy—measuring how well WAF, EDR, and SIEM detections perform against known TTPs.
  • Purple Teaming: Collaborate with the Blue Team to translate findings into immediate defensive improvements.
  • Mentorship & Growth: Serve as a technical leader, fostering curiosity, ethical hacking, and security posture improvements.
  • Executive Reporting: Translate complex exploits into risk-based narratives for leadership to help prioritize engineering resources.

Qualifications

  • Experience: 4+ years in offensive security, application security or other relevant field
  • Deep knowledge: AI, Coding agents, LLMs, prompt engineering, AI-related attack vectors, Agentic concepts for red team and testing Cloudflare uses
  • Technical Roots: Strong background in manual penetration testing, exploit development, or cloud security (AWS/GCP/Bare Metal)
  • Operational Mindset: Experience using the MITRE ATT&CK framework to map coverage and identify blind spots in defensive telemetry
  • Communication Skills: Ability to explain a complex 0-day exploit to non-technical stakeholders while engaging a deep-dive engineering team
  • Tooling Familiarity: Knowledge of automated breach and attack simulation (BAS) tools and custom-built frameworks for payload delivery and C2 infrastructure

Skills

Required:AI security researchAdversary simulationMITRE ATT&CK mappingPenetration testing / exploit developmentCommunication with stakeholders
Last updated Aug 26, 2026. Interested? Apply on the company site.

About Cloudflare

Connect, protect, and build everywhere | Cloudflare

Make employees, applications and networks faster and more secure everywhere, while reducing complexity and cost.

NetworkingSecurityPerformanceDeveloper PlatformAI
Company profileWebsite

More open roles at Cloudflare