Product Security Engineer

A product security engineer at Cloudflare working across security reviews, vulnerability operations and internal AI tooling for the company's core software products. The role is based in Austin or London.

The engineer threat models new features using methods such as STRIDE, triages and validates bug bounty reports, supports penetration tests, routes findings from bounties, SAST, fuzzing and pen tests to the right owners and tracks them to fix within SLA, and writes AI-driven tools that automate triage and enrichment. Cloudflare wants five or more years in product or application security on large cloud or SaaS platforms, hands-on experience building automation with LLMs, threat modelling skill and experience driving remediation across engineering teams. Systems security research and HackerOne or Bugcrowd program experience are pluses.