AI-Driven Product Security Engineer

Cloudflare; Greater London; On-site; GBP 90,000 - 150,000; Full time

Benefits offered by this job

Equity plan

Health benefits

Parental leave

Job summary

Cloudflare, a leader in internet security and performance, seeks a Product Security Engineer to advance threat modeling, vulnerability operations, and AI-enabled security automation across our core products.

You will analyze architecture, triage findings, and collaborate with engineering to implement secure design and remediation strategies at scale. This role emphasizes building AI/LLM-powered tooling to speed up triage and data enrichment.

Qualifications

• 5+ years of experience in Product or Application Security within large-scale distributed cloud environments or SaaS platforms.
• Hands-on engineering experience leveraging AI/LLMs to solve operational or technical challenges.
• Competency in threat modeling methodologies and evaluating code flaws to determine security impact.
• Experience tracking, routing, and driving remediation of software vulnerabilities across engineering groups while working against defined SLAs.
• Ability to communicate technical security risks clearly to software engineers and resolve ownership ambiguity constructively.

Responsibilities

• Identify process bottlenecks and build AI-driven tools or scripts to automate code analysis, triage, and security workflows.
• Conduct structured security reviews and threat modeling sessions across product features.
• Manage the operational lifecycle of product security findings and ensure timely mitigation.
• Triage and validate external Bug Bounty submissions, evaluating exploitability and business risk.
• Coordinate internal/external pentest engagements and assist development teams with remediation.
• Partner with DevOps and product teams, acting as a security point of contact and promoting secure coding practices.

Skills

Product/AppSec Expertise

Practical AI & Automation Engineering

Threat Modeling & Risk Analysis

Vulnerability Lifecycle Operations

Strong Collaboration & Communication

Tools

SAST tooling

Fuzzing frameworks

Penetration testing frameworks

Job description

Cloudflare, a leader in internet security and performance, seeks a Product Security Engineer to advance threat modeling, vulnerability operations, and AI-enabled security automation across our core products.

You will analyze architecture, triage findings, and collaborate with engineering to implement secure design and remediation strategies at scale. This role emphasizes building AI/LLM-powered tooling to speed up triage and data enrichment.