24/7 MDR Response Engineer — DDoS & WAF Focus

WebHosting; Greater London; Hybrid; GBP 110,000 - 140,000; Full time

Job summary

Cloudflare in London is seeking a Response Engineer for the Cloudflare Managed Defense Center. You will autonomously investigate threat telemetry, handle live incident responses for volumetric DDoS and application-layer attacks, and analyze traffic anomalies during high-pressure events.

You will work with customers across web security, WAF, Bot Management, and DDoS mitigation, using dashboards and internal tools to tailor mitigation and report on security posture.

Qualifications

• 4-7 years of direct MDR or enterprise incident response experience.
• Knowledge of OWASP Top 10 and L7 WAF.
• Experience with network and application security incident handling.

Responsibilities

• Implement robust mitigation strategies for complex attacks across OSI Layers 3–7.
• Monitor alerts and perform near real-time traffic analysis to detect anomalies.
• Act as primary technical contact during active incidents with customers.
• Tune monitoring rules to improve signal-to-noise ratio and reduce false positives.
• Lead onboarding and deliver security posture reviews and post-incident reports.
• Collaborate with engineering, product and threat intelligence teams for feedback.

Skills

MDR experience

Incident response

Threat hunting

Linux/Unix

Scripting (Python/Bash)

Tools

tcpdump

Wireshark

Burp Suite

Prometheus

Grafana

Job description

Cloudflare in London is seeking a Response Engineer for the Cloudflare Managed Defense Center. You will autonomously investigate threat telemetry, handle live incident responses for volumetric DDoS and application-layer attacks, and analyze traffic anomalies during high-pressure events.

You will work with customers across web security, WAF, Bot Management, and DDoS mitigation, using dashboards and internal tools to tailor mitigation and report on security posture.