Cloudflare Security Engineer

Systems Limited; Lahore; On-site; PKR 1,800,000 - 3,000,000; Full time

Job summary

Cloudflare is seeking a Security Engineer in Lahore to secure and optimize the Cloudflare security platform. You will focus on WAF, DDoS protection, rate limiting, and firewall rules while collaborating with DevOps and application teams to strengthen security posture.

You will monitor security events, analyze patterns, and update SOC runbooks to respond to incidents effectively. Strong hands-on Cloudflare experience and threat-detection skills are essential.

Qualifications

• Minimum 3 years hands-on experience with Cloudflare security products and platform administration.
• Strong expertise in WAF, DDoS Protection, Rate Limiting and Firewall Rules.
• Experience reviewing and tuning WAF rules to reduce false positives and improve threat detection.
• Solid understanding of HTTP/HTTPS, TLS, DNS, CDN, and web app architectures.
• Experience developing and updating SOC runbooks and incident response playbooks.

Responsibilities

• Review, optimize, and maintain WAF rulesets to minimize false positives.
• Configure and fine-tune DDoS protection policies and mitigation strategies.
• Design and optimize Rate Limiting rules to curb abuse.
• Monitor Cloudflare security events and analyze traffic for improvements.
• Investigate incidents and implement remediation with internal teams.
• Develop SOC runbooks and playbooks for Cloudflare events and IR.

Skills

Threat detection

Incident response

Security operations

SOC runbooks

Collaboration

Tools

Cloudflare WAF

Cloudflare DDoS Protection

Rate Limiting

Firewall Rules

SIEM integration

Terraform (Cloudflare)

Job description

The Cloudflare Security Engineer will be responsible for securing, optimizing, and maintaining Cloudflare's security platform to ensure the protection, performance, and availability of web applications against evolving cyber threats. The role requires strong hands‑on expertise in Cloudflare security products, particularly Web Application Firewall (WAF), DDoS Protection, Rate Limiting, and Firewall Rules. The ideal candidate will have a strong understanding of web application security, threat detection, incident response, and security operations to strengthen the organization's overall security posture.

Responsibilities

• Review, optimize, and maintain Cloudflare Web Application Firewall (WAF) rulesets to enhance security while minimizing false positives.
• Configure, manage, and fine‑tune DDoS protection policies and mitigation strategies.
• Design, implement, and optimize Rate Limiting rules to protect applications against abuse and automated attacks.
• Monitor Cloudflare security events, analyze traffic patterns, and recommend improvements based on threat intelligence.
• Investigate security incidents related to web application attacks and collaborate with internal teams to implement remediation measures.
• Develop, maintain, and enhance Security Operations Center (SOC) runbooks and playbooks for Cloudflare‑related security events and incident response.
• Work closely with infrastructure, DevOps, and application teams to implement security best practices.
• Monitor and manage Cloudflare Firewall Rules and related security configurations.
• Analyze security events and recommend enhancements to improve threat detection and overall platform security.
• Stay updated on Cloudflare product enhancements and recommend the adoption of new security capabilities where appropriate.

Requirements

• Minimum 3 years of hands‑on experience with Cloudflare security products and platform administration.
• Strong expertise in Cloudflare Web Application Firewall (WAF), DDoS Protection, Rate Limiting, and Firewall Rules.
• Experience reviewing, tuning, and optimizing WAF rules to reduce false positives and improve threat detection.
• Strong understanding of web application security concepts, including the OWASP Top 10.
• Experience developing, maintaining, and updating SOC playbooks and incident response runbooks.
• Solid understanding of HTTP/HTTPS, TLS, DNS, CDN, and web application architectures.
• Experience monitoring security events, analyzing traffic, and investigating web application security incidents.
• Strong analytical, troubleshooting, and problem‑solving skills.
• Ability to collaborate effectively with infrastructure, DevOps, application, and security operations teams.

Preferred Qualifications

• Experience with Google Cloud Platform (GCP) security and networking.
• Familiarity with cloud-native security services and infrastructure.
• Experience integrating Cloudflare with SIEM and security monitoring platforms.
• Knowledge of Infrastructure as Code (IaC) and Terraform for Cloudflare configuration management.
• Relevant security certifications such as Security+, GSEC, CISSP, CCSP, or Cloudflare certifications will be an added advantage.