AI-Driven Product Security Engineer

Webhosting; Austin (TX); On-site; USD 140,000 - 200,000; Full time

Benefits offered by this job

Equity plan

Health & welfare benefits

Time off

Job summary

Cloudflare is seeking a Product Security Engineer in Austin, TX to support security assessments and vulnerability operations for core software products. You will analyze architecture, model threats, triage findings, and coordinate mitigations within SLAs.

You may conduct deep-dive reviews, triage bug bounty submissions, and collaborate with engineering to resolve vulnerabilities from bug bounties, SAST, fuzzing, and pen tests. Expect AI-enabled tooling to scale security workflows.

Qualifications

• 5+ years in Product or Application Security in large-scale cloud environments.
• Hands-on automation experience using AI/LLMs for security workflows.
• Experience with threat modeling methods and risk assessment.
• Proven track record in managing vulnerability lifecycle across teams.
• Strong collaboration and clear security communication with engineers.

Responsibilities

• Implement AI-driven security tooling to automate triage and data enrichment.
• Lead threat modeling sessions across product features.
• Manage security findings and track remediation within SLAs.
• Triage bug bounty submissions and assess exploitability and risk.
• Coordinate pen tests and support remediation with development teams.
• Partner with DevOps and product teams to embed secure coding practices.

Skills

Product/AppSec expertise

AI & automation engineering

Threat modeling & risk analysis

Vulnerability lifecycle operations

Strong collaboration & communication

Offensive security tooling

Program management experience

Hardware security integration

Tools

AI/LLM tooling

Fuzzing frameworks

Vulnerability assessment tooling

Bug bounty platforms

Job description

Cloudflare is seeking a Product Security Engineer in Austin, TX to support security assessments and vulnerability operations for core software products. You will analyze architecture, model threats, triage findings, and coordinate mitigations within SLAs.

You may conduct deep-dive reviews, triage bug bounty submissions, and collaborate with engineering to resolve vulnerabilities from bug bounties, SAST, fuzzing, and pen tests. Expect AI-enabled tooling to scale security workflows.