Vulnerability Defense Software Engineer, Cloudforce One

Software engineer on Cloudforce One, Cloudflare's threat operations and research team, building systems that help security practitioners weigh technical risk, dig into complex systems, rank what matters and give engineering teams clear fixes. The aim is to turn investigative tradecraft into tools and workflows that scale and rest on evidence.

The engineer designs and runs distributed services, mostly in Go and TypeScript, works with practitioners to find what can be automated, mentors other developers and takes on-call shifts. The team wants five or more years building large-scale software plus a working grasp of security: threat modelling, attack techniques, exploitability, incident containment, and hands-on vulnerability research or exploit development. Experience with AI-assisted development and agentic workflows is expected. Based in Austin or Washington, DC.