Senior Cloud Security Engineer - Cloudflare & API Security

BMP Technologies; Sydney; On-site; AUD 140,000 - 190,000; Full time

Job summary

BMP Technologies is seeking a Senior Cloud Security Engineer to design, develop and support cloud and edge security solutions for enterprise applications and APIs. You will work with application developers, architects and security teams to implement security automation, improve controls and troubleshoot security events.

You will design and validate security solutions across the delivery lifecycle, integrating telemetry with SIEM and monitoring platforms, and documenting configurations and

Qualifications

• Experience in cloud security within enterprise environments.
• Hands-on with Cloudflare WAF, Workers and bot management.
• Development skills in JavaScript/TypeScript and Python or PowerShell.
• Strong understanding of APIs, web protocols and security controls.

Responsibilities

• Design, implement and maintain Cloudflare security services (WAF, bot protection, rate limiting, API security).
• Develop Cloudflare Workers for secure request handling and custom controls.
• Build security tooling and automation using JavaScript/TypeScript and Python.
• Tune WAF rules, investigate threats and collaborate with infra and app teams.
• Integrate security telemetry with SIEM and monitoring platforms.

Skills

Cloud security

Application security

Cloudflare WAF

JavaScript/TypeScript

Python

APIs security (REST/GraphQL)

Web protocols (HTTP/S, TLS)

SIEM / observability

Documentation & collaboration

Education

Bachelor's degree in IT/CS/C cybersecurity

Tools

Cloudflare WAF

Cloudflare Workers

TypeScript

Python

PowerShell

Job description

BMP Technologies is seeking a Senior Cloud Security Engineer to design, develop and support cloud and edge security solutions for enterprise applications and APIs. You will work with application developers, architects and security teams to implement security automation, improve controls and troubleshoot security events.

You will design and validate security solutions across the delivery lifecycle, integrating telemetry with SIEM and monitoring platforms, and documenting configurations and