Cloudflare Security Engineer

Systems Limited; Lahore; In loco; PKR 1.800.000 - 3.200.000; Tempo pieno

Descrizione del lavoro

Cloudflare is seeking a Security Engineer to secure and optimize Cloudflare's security platform, focusing on WAF, DDoS, rate limiting, and firewall rules. The role involves incident response, threat intelligence, and close collaboration with infrastructure, DevOps, and application teams to strengthen security across web applications.

The ideal candidate has hands-on Cloudflare security product experience, strong knowledge of OWASP Top 10, and experience maintaining SOC playbooks to improve

Competenze

• Strong hands-on experience with Cloudflare security products.
• Understanding of web app security concepts including OWASP Top 10.
• Experience developing and updating SOC playbooks and incident response runbooks.

Mansioni

• Review, optimize, and maintain Cloudflare WAF rulesets.
• Configure and tune DDoS protection policies.
• Design and optimize Rate Limiting rules to prevent abuse.
• Monitor security events and analyze traffic patterns for improvements.
• Investigate incidents and collaborate with teams for remediation.
• Develop SOC runbooks and playbooks for Cloudflare events.
• Collaborate with infra, DevOps, and apps teams on security best practices.
• Monitor Cloudflare Firewall Rules and security configurations.
• Suggest enhancements based on threat intelligence and product updates.

Conoscenze

WAF

DDoS Protection

Rate Limiting

Firewall Rules

SOC Readiness

Descrizione del lavoro

The Cloudflare Security Engineer will be responsible for securing, optimizing, and maintaining Cloudflare's security platform to ensure the protection, performance, and availability of web applications against evolving cyber threats. The role requires strong hands-on expertise in Cloudflare security products, particularly Web Application Firewall (WAF), DDoS Protection, Rate Limiting, and Firewall Rules. The ideal candidate will have a strong understanding of web application security, threat detection, incident response, and security operations to strengthen the organization's overall security posture.

Responsibilities

• Review, optimize, and maintain Cloudflare Web Application Firewall (WAF) rulesets to enhance security while minimizing false positives.
• Configure, manage, and fine-tune DDoS protection policies and mitigation strategies.
• Design, implement, and optimize Rate Limiting rules to protect applications against abuse and automated attacks.
• Monitor Cloudflare security events, analyze traffic patterns, and recommend improvements based on threat intelligence.
• Investigate security incidents related to web application attacks and collaborate with internal teams to implement remediation measures.
• Develop, maintain, and enhance Security Operations Center (SOC) runbooks and playbooks for Cloudflare-related security events and incident response.
• Work closely with infrastructure, DevOps, and application teams to implement security best practices.
• Monitor and manage Cloudflare Firewall Rules and related security configurations.
• Analyze security events and recommend enhancements to improve threat detection and overall platform security.
• Stay updated on Cloudflare product enhancements and recommend the adoption of new security capabilities where appropriate.

Requirements

• Minimum 3 years of hands-on experience with Cloudflare security products and platform administration.
• Strong expertise in Cloudflare Web Application Firewall (WAF), DDoS Protection, Rate Limiting, and Firewall Rules.
• Experience reviewing, tuning, and optimizing WAF rules to reduce false positives and improve threat detection.
• Strong understanding of web application security concepts, including the OWASP Top 10.
• Experience developing, maintaining, and updating SOC playbooks and incident response runbooks.
• Solid understanding of HTTP/HTTPS, TLS, DNS, CDN, and web application architectures.
• Experience monitoring security events, analyzing traffic, and investigating web application security incidents.
• Strong analytical, troubleshooting, and problem-solving skills.
• Ability to collaborate effectively with infrastructure, DevOps, application, and security operations teams.

Preferred Qualifications

• Experience with Google Cloud Platform (GCP) security and networking.
• Familiarity with cloud-native security services and infrastructure.
• Experience integrating Cloudflare with SIEM and security monitoring platforms.
• Knowledge of Infrastructure as Code (IaC) and Terraform for Cloudflare configuration management.
• Relevant security certifications such as Security+, GSEC, CISSP, CCSP, or Cloudflare certifications will be an added advantage.