Security Operations Center Engineer

Cloudflare; Cainta; Hybrid; PHP 1,744,000 - 2,326,000; Full time

Job summary

A leading cybersecurity company is seeking a Security Operations Center Analyst responsible for providing premium-level support for security products. This role involves monitoring alerts, mitigating attacks, and communicating with high-value customers. Ideal candidates will have at least 2 years of technical support experience and a strong understanding of various security protocols.

Qualifications

• At least 2 years of technical support and customer support experience.
• Strong communication skills with high-value customers.
• Experience in handling attack mitigation and knowledge of various attacks (L3/4 and L7).

Responsibilities

• Monitor and investigate alerts to identify attacks.
• Work with teams to mitigate attacks and suggest improvements.
• Communicate extensively with customers via chat, email, and phone.

Skills

Strong understanding of the OSI model, TCP, UDP, BGP, QUIC

Advanced understanding of iptables

Analysis of traffic for attack anomaly detection

Customer support experience

Command line / Bash shell

Programming skills (Python, Ruby, PHP, C, C#, Java, Perl, Git)

Education

Technical support experience

Tools

Security certifications (CISSP, GCIA, GCIH)

Job description

About Us

At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code.

We realize people do not fit into neat boxes. We are looking for curious and empathetic individuals who are committed to developing themselves and learning new skills, and we are ready to help you do that. We cannot complete our mission without building a diverse and inclusive team.

Job Locations

Hybrid - Austin

To the attention of candidates

This role requires full time work over the Weekends. Candidates should be comfortable working with a Tuesday - Saturday or Sunday - Thursday 5-day working week schedule.

About the Department

The Cloudflare Customer Support Team solves complicated problems and answers technical questions via phone, email, chat and social media. Whether it is a Wordpress blogger using our services for free or a global Enterprise business with petabytes of web traffic, we are always eager to assist.

Description

Security Operations Center Analysts provide premium-level support for Cloudflare’s security products and features. Our largest and most technically sophisticated customers will contact the SOC as a Service team for assistance and intelligence in dealing with threats or attacks on their infrastructure at OSI Layers 3, 4, and 7.

Responsibilities

• Monitor and investigate the alerts to identify attacks
• Work with Engineering and Operations teams to mitigate attacks, suggest steps to mitigate, and apply the appropriate mitigation, when applicable
• Work with Engineering and Product teams to improve the products and tools
• Extensive communications with customers via chat, email, and phone
• Review the latest alerts to determine relevancy and urgency. Create new tracking tickets for alerts that signal an incident and require review or escalation
• Configure / Manage security monitoring rules and contribute to tool improvements
• Compare traffic signatures and attributes including IP addresses, cookie variations, HTTP headers, and JavaScript footprints to determine what is good traffic and what is malicious
• Participation in a weekend and holiday rotation required with main working hours 9 to 5 Pacific time

Key skill sets

• Strong understanding of the OSI model, TCP, UDP, BGP, QUIC
• Advanced understanding of iptables
• Analysis of traffic for attack anomaly detection and creation of mitigation rules
• Experience in handling attack mitigation and thorough knowledge of various attacks (L3/4 and L7)
• At least 2 years of technical support experience and customer support experience is a must
• Strong communication skills with high-value customers
• Command line / Bash shell
• Sysadmin skills (Linux/Mac/Windows) & Programming skills (Python, Ruby, PHP, C, C#, Java, Perl, Git etc.)
• Security skills and certifications preferred: CISSP, GCIA GCIH, GCFA, GCFE, etc.

Bonus Points

• Previous DDoS mitigation for OSI layers 3,4, & 7, filter malicious traffic using Cloudflare tools like Magic Transit, Network Firewall, WAF, IP reputation lists, packet inspection, blacklisting, whitelisting, and/or rate limiting is a plus

Cloudflare is proud to be an equal opportunity employer. We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness. All qualified applicants will be considered for employment without regard to their, or any other person's, perceived or actual race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law.