Cloudflare Security Engineer: WAF & DDoS Defense Lead

iSystems Ltd; Islamabad; Sur place; PKR 1 200 000 - 2 400 000; Plein temps

Résumé du poste

Cloudflare is seeking a Security Engineer to secure, optimize, and maintain Cloudflare's security platform for web applications. The role emphasizes hands-on work with WAF, DDoS, rate limiting, and firewall rules to strengthen threat detection and incident response.

The ideal candidate will understand OWASP Top 10, SOC playbooks, and security operations, collaborating with infrastructure and DevOps teams to uplift overall security posture.

Qualifications

• Hands-on experience securing Cloudflare security products and platform administration.
• Strong knowledge of Web Application Firewall (WAF), DDoS Protection, Rate Limiting and Firewall Rules.
• Solid understanding of web app security concepts (OWASP Top 10).
• Experience developing and updating SOC playbooks and incident response runbooks.

Responsabilités

• Review, optimize, and maintain Cloudflare WAF rulesets to reduce false positives.
• Configure and refine DDoS protection policies and mitigation strategies.
• Design and optimize Rate Limiting rules to prevent abuse.
• Monitor Cloudflare security events and analyze traffic for improvements.
• Investigate incidents and implement remediation with internal teams.
• Develop and improve SOC runbooks and playbooks for Cloudflare events.
• Collaborate with infrastructure, DevOps, and app teams on security best practices.
• Manage Cloudflare Firewall Rules and related configurations.
• Analyze events to enhance threat detection and platform security.
• Stay updated on Cloudflare product enhancements and recommend new capabilities.

Description du poste

Cloudflare is seeking a Security Engineer to secure, optimize, and maintain Cloudflare's security platform for web applications. The role emphasizes hands-on work with WAF, DDoS, rate limiting, and firewall rules to strengthen threat detection and incident response.

The ideal candidate will understand OWASP Top 10, SOC playbooks, and security operations, collaborating with infrastructure and DevOps teams to uplift overall security posture.