Cloudflare

2 weeks ago

Product Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 3 hours agoStatus: Live

Job Summary

Support security assessments and vulnerability operations for Cloudflare’s core software products. You’ll review system architecture, perform threat modeling (e.g., STRIDE), triage and route security findings to the right engineering owners, and drive mitigations against SLAs. Work across bug bounties, SAST, fuzzing, and penetration testing, collaborating with engineering teams and building AI/LLM-enabled automation to scale initial triage and data enrichment.

Location: Bengaluru

Workplace: Onsite

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Build AI-driven tools or scripts to automate code analysis, optimize triage, and streamline Product Security workflows.
•Conduct structured security reviews and threat modeling across product features, defining security requirements early.
•Manage the operational lifecycle of product security findings, verifying issues, mapping them to engineering owners, and tracking mitigations to SLAs.
•Perform technical triage and validation of external bug bounty submissions, including exploitability and business risk evaluation.
•Coordinate internal and external penetration testing by reviewing findings, clarifying technical context, and supporting remediation strategies.

Key Requirements

•5+ years of Product/Application Security experience in large-scale distributed cloud environments or SaaS platforms.
•Hands-on engineering experience building production-grade automation scripts/tools, including AI/LLMs for operational or technical challenges.
•Competency in threat modeling methodologies and evaluating code flaws to assess engineering and security impact.
•Experience tracking, routing, and driving vulnerability remediation across engineering groups while working to defined SLAs.
•Ability to collaborate across teams, clearly communicate security risks, and resolve ownership ambiguity with engineering owners.

Experience:5+ yearsCloudSaaS

Skills:CollaborationCommunicationAnalytical thinkingAutonomous problem-solvingRisk assessment

Languages:English

Tech Stack:AILLMSTRIDESASTFuzzingPenetration testingBug bountyAutomation scriptsJIRAHackerOneBugcrowd

Company Brief

Cloudflare

Provides a global network and cloud platform that delivers security, performance, and reliability services for web applications, APIs, and Internet properties, including CDN, DDoS protection, DNS, and zero-trust security solutions.

Industry: Cybersecurity

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: San Francisco, United States

Founded: 2009

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Cloudflare

2 weeks ago

Product Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 3 hours agoStatus: Live

Job Summary

Location: Bengaluru

Workplace: Onsite

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Build AI-driven tools or scripts to automate code analysis, optimize triage, and streamline Product Security workflows.
•Conduct structured security reviews and threat modeling across product features, defining security requirements early.
•Manage the operational lifecycle of product security findings, verifying issues, mapping them to engineering owners, and tracking mitigations to SLAs.
•Perform technical triage and validation of external bug bounty submissions, including exploitability and business risk evaluation.
•Coordinate internal and external penetration testing by reviewing findings, clarifying technical context, and supporting remediation strategies.

Key Requirements

•5+ years of Product/Application Security experience in large-scale distributed cloud environments or SaaS platforms.
•Hands-on engineering experience building production-grade automation scripts/tools, including AI/LLMs for operational or technical challenges.
•Competency in threat modeling methodologies and evaluating code flaws to assess engineering and security impact.
•Experience tracking, routing, and driving vulnerability remediation across engineering groups while working to defined SLAs.
•Ability to collaborate across teams, clearly communicate security risks, and resolve ownership ambiguity with engineering owners.

Experience:5+ yearsCloudSaaS

Skills:CollaborationCommunicationAnalytical thinkingAutonomous problem-solvingRisk assessment

Languages:English

Tech Stack:AILLMSTRIDESASTFuzzingPenetration testingBug bountyAutomation scriptsJIRAHackerOneBugcrowd

Company Brief

Cloudflare

Industry: Cybersecurity

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: San Francisco, United States

Founded: 2009

Website LinkedIn