jobapplier

Vulnerability Defense Software Engineer (Cloudforce One)

Cloudflare

Skills

Required

  • PostgreSQL
  • Go / TypeScript
  • distributed systems
  • RESTful APIs / gRPC
  • incident response workflows
  • network containment
  • vulnerability research/exploit development
  • cybersecurity
  • threat modeling
  • trust boundaries
  • SQL

Preferred

  • debugging
  • Application security / security research / security automation
  • system design

Cloudflare's Cloudforce One team, a threat operations and research group dedicated to identifying and disrupting cyber threats. As a Vulnerability Defense Software Engineer, you will build and evolve systems that help security practitioners assess technical risk, investigate complex systems, prioritize issues, and deliver actionable guidance to engineering teams.

About Cloudflare

  • You will work with a variety of technologies, including Go, TypeScript, Rust, Kafka, Redis, Kubernetes, Terraform, and PostgreSQL.
  • Design, build, run, and scale distributed tools and services that translate security tradecraft into scalable, evidence-based systems and workflows.

Responsibilities

  • Partner with security practitioners to understand workflows, bottlenecks, and opportunities for automation, and improve system design and architecture.
  • Mentor and guide other developers in the team, helping to build collective technical expertise and promote best practices for writing well-tested, modular, and reusable code.

Requirements

  • At least 5 years of experience building large-scale software applications, preferably distributed systems
  • Experience designing and integrating RESTful APIs and/or gRPC services
  • Familiarity with incident response workflows, network containment, and remediation
  • Practical experience in vulnerability research/exploit development and translating findings into actionable mitigations
  • Interest in opportunities to be a technical mentor for teammates
  • Ability to independently define and deliver solutions in ambiguous problem spaces

Expertise in writing well-tested code

  • Working knowledge of cybersecurity concepts such as threat modeling, attack techniques, trust boundaries, exploitability, and defensive controls
  • Knowledge of SQL and common relational database systems such as PostgreSQL
  • Prior experience writing production-ready code in Go and/or TypeScript
  • Experience with AI-assisted development and designing agentic AI workflows
  • Experience evaluating probabilistic systems
  • Deep understanding of DNS, TLS/SSL and HTTP

Preferred

  • Excellent debugging and optimization skills
  • Application security, security research, or security automation experience

Pay

USD 150,000 - 206,000

Benefits

  • This role offers competitive pay, flexible vacation, paid parental leave, comprehensive benefits, and a commuter program.

Every job at Cloudflare