Product Security Engineer - AI-Driven Vulnerability Ops

Cloudflare; United Kingdom; Hybrid; GBP 120,000 - 170,000; Full time

Benefits offered by this job

Stock benefits

Generous vacation

Parental leave

Healthcare

Job summary

Cloudflare is seeking a Product Security Engineer to support security assessments and vulnerability operations for its core software products. You will analyze architectures, threat-model features, and triage findings to engineering owners within SLAs.

You may lead deep-dive security reviews on new features, triage complex bug bounty submissions, and collaborate with engineering teams to resolve vulnerabilities from bug bounties, SAST, fuzzing and penetration tests.

Qualifications

• 5+ years of experience in Product or Application Security within large-scale distributed cloud environments or SaaS platforms.
• Competency in threat modeling methodologies and evaluating code flaws for security impact.
• Experience building and using automation/AI tooling to solve security or operational challenges.
• Strong collaboration and communication across engineering teams to resolve ownership ambiguities.
• Experience in crowdsourced security programs (e.g., HackerOne, Bugcrowd) or agile project management workflows.

Responsibilities

• Conduct security assessments and threat modeling for new product features.
• Triage, route, and track vulnerabilities to engineering owners within SLAs.
• Coordinate bug bounty triage and remediation efforts with internal and external teams.
• Support internal and external penetration testing engagements by clarifying findings and advising remediation.
• Develop AI-driven tooling to automate initial triage and data enrichment for security findings.
• Collaborate with DevOps and product teams to implement secure coding practices.

Skills

Threat modeling

Security assessment

Bug bounty triage

Collaboration across teams

AI tooling

Education

Bachelor's degree in CS or related field

Tools

SAST tools

Fuzzing tools

Penetration testing tools

Job description

Cloudflare is seeking a Product Security Engineer to support security assessments and vulnerability operations for its core software products. You will analyze architectures, threat-model features, and triage findings to engineering owners within SLAs.

You may lead deep-dive security reviews on new features, triage complex bug bounty submissions, and collaborate with engineering teams to resolve vulnerabilities from bug bounties, SAST, fuzzing and penetration tests.