Senior Product Security Engineer

A senior product security engineer who leads security assessments and vulnerability operations for Cloudflare's core software products, combining design review, vulnerability management and internal AI tooling. The role is based in Austin or London.

The engineer leads threat modelling of distributed systems, owns the lifecycle of product security findings against SLAs, oversees technical triage of the bug bounty program, shapes penetration test scope, builds AI-driven tools that automate code analysis and triage, mentors junior engineers and develops security champions and developer guardrails. Cloudflare wants extensive product or application security experience on large cloud or SaaS platforms, hands-on automation with LLMs, deep STRIDE-style threat modelling, and the ability to influence senior engineering leaders. Offensive security and HackerOne or Bugcrowd experience are pluses.