Cloudflare Security Engineer

Systems Limited; Islamabad; In loco; PKR 1.200.000 - 2.400.000; Tempo pieno

Descrizione del lavoro

Cloudflare is seeking a Security Engineer to secure, optimize, and maintain Cloudflare's security platform for web applications. The role emphasizes hands-on work with WAF, DDoS, rate limiting, and firewall rules to strengthen threat detection and incident response.

The ideal candidate will understand OWASP Top 10, SOC playbooks, and security operations, collaborating with infrastructure and DevOps teams to uplift overall security posture.

Competenze

• Hands-on experience securing Cloudflare security products and platform administration.
• Strong knowledge of Web Application Firewall (WAF), DDoS Protection, Rate Limiting and Firewall Rules.
• Solid understanding of web app security concepts (OWASP Top 10).
• Experience developing and updating SOC playbooks and incident response runbooks.

Mansioni

• Review, optimize, and maintain Cloudflare WAF rulesets to reduce false positives.
• Configure and refine DDoS protection policies and mitigation strategies.
• Design and optimize Rate Limiting rules to prevent abuse.
• Monitor Cloudflare security events and analyze traffic for improvements.
• Investigate incidents and implement remediation with internal teams.
• Develop and improve SOC runbooks and playbooks for Cloudflare events.
• Collaborate with infrastructure, DevOps, and app teams on security best practices.
• Manage Cloudflare Firewall Rules and related configurations.
• Analyze events to enhance threat detection and platform security.
• Stay updated on Cloudflare product enhancements and recommend new capabilities.

Descrizione del lavoro

The Cloudflare Security Engineer will be responsible for securing, optimizing, and maintaining Cloudflare's security platform to ensure the protection, performance, and availability of web applications against evolving cyber threats. The role requires strong hands‑on expertise in Cloudflare security products, particularly Web Application Firewall (WAF), DDoS Protection, Rate Limiting, and Firewall Rules. The ideal candidate will have a strong understanding of web application security, threat detection, incident response, and security operations to strengthen the organization's overall security posture.

Responsibilities

• Review, optimize, and maintain Cloudflare Web Application Firewall (WAF) rulesets to enhance security while minimizing false positives.
• Configure, manage, and fine‑tune DDoS protection policies and mitigation strategies.
• Design, implement, and optimize Rate Limiting rules to protect applications against abuse and automated attacks.
• Monitor Cloudflare security events, analyze traffic patterns, and recommend improvements based on threat intelligence.
• Investigate security incidents related to web application attacks and collaborate with internal teams to implement remediation measures.
• Develop, maintain, and enhance Security Operations Center (SOC) runbooks and playbooks for Cloudflare‑related security events and incident response.
• Work closely with infrastructure, DevOps, and application teams to implement security best practices.
• Monitor and manage Cloudflare Firewall Rules and related security configurations.
• Analyze security events and recommend enhancements to improve threat detection and overall platform security.
• Stay updated on Cloudflare product enhancements and recommend the adoption of new security capabilities where appropriate.

Requirements

• Minimum 3 years of hands‑on experience with Cloudflare security products and platform administration.
• Strong expertise in Cloudflare Web Application Firewall (WAF), DDoS Protection, Rate Limiting, and Firewall Rules.
• Experience reviewing, tuning, and optimizing WAF rules to reduce false positives and improve threat detection.
• Strong understanding of web application security concepts, including the OWASP Top 10.
• Experience developing, maintaining, and updating SOC playbooks and incident response runbooks.
• Solid understanding of HTTP/HTTPS, TLS, DNS, CDN, and web application architectures.
• Experience monitoring security events, analyzing traffic, and investigating web application security incidents.
• Strong analytical, troubleshooting, and problem‑solving skills.
• Ability to collaborate effectively with infrastructure, DevOps, application, and security operations teams.

Preferred Qualifications

• Experience with Google Cloud Platform (GCP) security and networking.
• Familiarity with cloud-native security services and infrastructure.
• Experience integrating Cloudflare with SIEM and security monitoring platforms.
• Knowledge of Infrastructure as Code (IaC) and Terraform for Cloudflare configuration management.
• Relevant security certifications such as Security+, GSEC, CISSP, CCSP, or Cloudflare certifications will be an added advantage.