Cloudflare Security Engineer

Systems Limited; Karachi Division; In loco; PKR 1.800.000 - 3.000.000; Tempo pieno

Descrizione del lavoro

iSystems Ltd in Karachi is seeking a Cloudflare Security Engineer to secure, optimize, and maintain Cloudflare's security platform across web applications.

You will work with WAF, DDoS Protection, Rate Limiting, and Firewall Rules to strengthen threat detection and incident response, collaborating with DevOps and security teams.

Competenze

• Hands-on experience with Cloudflare security products and platform administration.
• Experience in reviewing, tuning, and optimizing WAF rules to reduce false positives.
• Strong understanding of web application security and OWASP Top 10.

Mansioni

• Review, optimize, and maintain Cloudflare WAF rulesets to enhance security while minimizing false positives.
• Configure, manage, and fine-tune DDoS protection policies and mitigation strategies.
• Design, implement, and optimize Rate Limiting rules to protect applications against abuse and automated attacks.
• Monitor Cloudflare security events, analyze traffic patterns, and recommend improvements based on threat intelligence.
• Investigate security incidents related to web application attacks and collaborate with internal teams to implement remediation measures.
• Develop, maintain, and enhance SOC runbooks and playbooks for Cloudflare-related security events and incident response.
• Work closely with infrastructure, DevOps, and application teams to implement security best practices.
• Monitor and manage Cloudflare Firewall Rules and related security configurations.
• Analyze security events and recommend enhancements to improve threat detection and overall platform security.
• Stay updated on Cloudflare product enhancements and recommend the adoption of new security capabilities where appropriate.

Conoscenze

Cloudflare WAF

DDoS Protection

Rate Limiting

Firewall Rules

SOC Runbooks

Incident Response

Threat Intelligence

HTTP/TLS/DNS

OWASP Top 10

Strumenti

Cloudflare

SIEM

Descrizione del lavoro

The Cloudflare Security Engineer will be responsible for securing, optimizing, and maintaining Cloudflare's security platform to ensure the protection, performance, and availability of web applications against evolving cyber threats. The role requires strong hands-on expertise in Cloudflare security products, particularly Web Application Firewall (WAF), DDoS Protection, Rate Limiting, and Firewall Rules. The ideal candidate will have a strong understanding of web application security, threat detection, incident response, and security operations to strengthen the organization's overall security posture.

Responsibilities

• Review, optimize, and maintain Cloudflare Web Application Firewall (WAF) rulesets to enhance security while minimizing false positives.
• Configure, manage, and fine-tune DDoS protection policies and mitigation strategies.
• Design, implement, and optimize Rate Limiting rules to protect applications against abuse and automated attacks.
• Monitor Cloudflare security events, analyze traffic patterns, and recommend improvements based on threat intelligence.
• Investigate security incidents related to web application attacks and collaborate with internal teams to implement remediation measures.
• Develop, maintain, and enhance Security Operations Center (SOC) runbooks and playbooks for Cloudflare-related security events and incident response.
• Work closely with infrastructure, DevOps, and application teams to implement security best practices.
• Monitor and manage Cloudflare Firewall Rules and related security configurations.
• Analyze security events and recommend enhancements to improve threat detection and overall platform security.
• Stay updated on Cloudflare product enhancements and recommend the adoption of new security capabilities where appropriate.

Requirements

• Minimum 3 years of hands-on experience with Cloudflare security products and platform administration.
• Strong expertise in Cloudflare Web Application Firewall (WAF), DDoS Protection, Rate Limiting, and Firewall Rules.
• Experience reviewing, tuning, and optimizing WAF rules to reduce false positives and improve threat detection.
• Strong understanding of web application security concepts, including the OWASP Top 10.
• Experience developing, maintaining, and updating SOC playbooks and incident response runbooks.
• Solid understanding of HTTP/HTTPS, TLS, DNS, CDN, and web application architectures.
• Experience monitoring security events, analyzing traffic, and investigating web application security incidents.
• Strong analytical, troubleshooting, and problem-solving skills.
• Ability to collaborate effectively with infrastructure, DevOps, application, and security operations teams.

Preferred Qualifications

• Experience with Google Cloud Platform (GCP) security and networking.
• Familiarity with cloud-native security services and infrastructure.
• Experience integrating Cloudflare with SIEM and security monitoring platforms.
• Knowledge of Infrastructure as Code (IaC) and Terraform for Cloudflare configuration management.
• Relevant security certifications such as Security+, GSEC, CISSP, CCSP, or Cloudflare certifications will be an added advantage.