Senior Product Security Engineer: AI-Driven Vulnerability Ops

Cloudflare; United Kingdom; On-site; GBP 110,000 - 170,000; Full time

Benefits offered by this job

Competitive pay and stock ownership

Flexible vacation policy

Parental leave: up to 16 weeks

Healthcare & life insurance

Transit commuter benefits

Wellbeing programs

Job summary

Cloudflare is seeking a Senior Product Security Engineer to lead vulnerability operations and security assessments across our core software. You will model threats, triage findings with engineers, and drive remediation within SLAs in a collaborative, fast-paced environment.

Additionally, you will build AI/LLM powered tools to automate triage and data enrichment, mentor engineers, and strengthen security across distributed systems and bug bounty programs.

Qualifications

• Extensive Product/Application Security experience in large-scale cloud environments.
• Hands-on AI/automation tooling with AI/LLMs for security workflows.
• Strong cross-functional leadership and ability to influence senior engineers.
• Proven vulnerability lifecycle management across multiple stakeholders.
• Mastery of threat modeling methods (e.g., STRIDE) and risk analysis.
• Experience in academic or vulnerability research focused on systems security.
• Experience with offensive security tooling and modern pentesting techniques.
• Program management experience with crowdsourced security programs or agile workflows.
• Experience integrating hardware security features into production code.

Responsibilities

• Lead security assessments and vulnerability operations for Cloudflare’s core products.
• Analyze architecture, threat-model new features, and triage findings with engineering owners.
• Triage bug bounty submissions and coordinate remediation with engineering teams.
• Develop autonomous AI tooling to automate triage and data enrichment.
• Drive AI security innovations and build production-grade automation tools.
• Lead security reviews and threat modeling across distributed systems.
• Own vulnerability lifecycle from discovery to remediation within SLAs.
• Oversee external bug bounty triage and validation based on exploitability and risk.
• Mentor engineers and establish secure development guardrails.

Skills

Product/Sec Engineering

AI/Automation Engineering

Threat Modeling

Vulnerability Lifecycle

Cross-functional Leadership

Security Automation

Bounty Program Experience

Security Architecture

Offensive Security

Job description

Cloudflare is seeking a Senior Product Security Engineer to lead vulnerability operations and security assessments across our core software. You will model threats, triage findings with engineers, and drive remediation within SLAs in a collaborative, fast-paced environment.

Additionally, you will build AI/LLM powered tools to automate triage and data enrichment, mentor engineers, and strengthen security across distributed systems and bug bounty programs.