Top Cyber Security Jobs

Build automated GRC solutions and maintain the GRC platform; architect AI governance for autonomous agents; support audit readiness (SOC 2, ISO 27001, PCI, FedRAMP) via automated drift detection and self-healing; and integrate security across Legal, People, Engineering, and Finance to enable developer-friendly compliance.

Conduct vulnerability scanning and in-depth analysis, triage and prioritize findings, produce remediation guidance, track remediation progress, and ensure processes and evidence meet DoD IL4 and FedRAMP compliance requirements while collaborating with engineering and compliance teams.

Leads Cloudflare’s global vulnerability management program as its technical authority. Responsibilities include designing security architectures and integrations, conducting vulnerability scans and validation, prioritizing risks, driving remediation, managing backlogs, developing AI-enabled automation, and partnering with engineering and GRC teams. The role also translates compliance requirements into scanning policies, supports audits, generates technical evidence, and maintains remediation standards and workflows.

12-week on-site security internship focused on Enterprise Identity & Access Management. Execute a security project, maintain user access review dashboards, analyze group ownership, support RBAC implementation, collaborate cross-functionally, present results company-wide, and publish work on Cloudflare channels.

Conduct AI security research, agentic and LLM testing, vulnerability discovery, adversary simulations, and full-chain red team operations. Test WAF, EDR, and SIEM detection efficacy using MITRE ATT&CK, collaborate with blue teams and incident response, develop detection validation frameworks, report risks to executives, and mentor security professionals.

Lead product security assessments, threat model features, triage and own vulnerability lifecycle from bug bounty, SAST, fuzzing, and pentests. Build AI/LLM-driven automation and tooling to scale triage and enrichment, mentor engineers, and influence security across distributed cloud products.

Conduct threat models and security reviews for Cloudflare products, triage and manage vulnerability lifecycle (bug bounties, SAST, fuzzing, pentests), build AI/LLM-driven automation tooling for triage and enrichment, coordinate pentests and remediation with engineering, and act as the product security point of contact.

Design and implement threat intelligence-driven detections and automated defenses. Collect and analyze TI (OSINT, feeds, dark web), build ML-based detection pipelines, develop SOAR playbooks, integrate security tools via APIs, support incident response, and produce actionable intelligence for technical and executive stakeholders.

Deliver advisory and hands-on implementation, migration, and optimization services for Cloudflare application security and performance products. Gather requirements, design solutions, create technical documentation and deployment artifacts, implement customer changes, troubleshoot issues, support escalations, and develop automation, procedures, and best practices. The role is customer-facing, requires strong Internet security and networking expertise, and involves approximately 30% travel.

Design, implement, and operate IAM solutions including SSO integrations (SAML/OIDC/OAuth/SCIM), IGA, PAM, RBAC/ABAC, access certification, and automation. Secure identities using Cloudflare products, integrate with SaaS/apps, implement Zero Trust and ITDR controls, manage IAM platforms, and provide operational/on-call support.