Edge Security Engineer — Cloudflare & Network Defense

Gusto; San Francisco (CA); Hybrid; USD 210,000 - 270,000; Full time

Job summary

Gusto is seeking a Security Engineer to lead edge and network security strategy, owning Cloudflare WAF, DDoS protection, and Zero Trust rollouts at scale. You will drive security architecture across AWS and the edge, and automate with policy-as-code while championing incident response and measurable risk reduction.

The role requires deep Cloudflare expertise, strong network design skills, and a generalist security mindset to partner with infrastructure and product teams.

Qualifications

• 10+ years of hands-on security engineering experience focusing on edge, network, or perimeter security.
• Deep production expertise with Cloudflare's security stack including WAF, DDoS, Bot Management, and Zero Trust.
• Strong network design skills across edge and cloud (AWS) and Terraform-based implementations.
• Fluency with policy-as-code and CI/CD-first delivery of security controls.

Responsibilities

• Design and operate the edge security stack and perimeters across cloud and on‑premise ecosystems.
• Develop policy-as-code patterns and ship changes through PRs with tests and rollback.
• Build detections and alerting from edge and network telemetry and lead incident response.
• Collaborate with infrastructure and product teams to drive secure architectural decisions.

Skills

Cloudflare WAF

DDoS protection

Zero Trust

Terraform

Policy-as-code

Incident response

AI-native tooling

Cloud networking (AWS)

CI/CD security

communication

Tools

Cloudflare

Wiz

CrowdStrike

Panther

Tines

Terraform

Crossplane

Job description

Gusto is seeking a Security Engineer to lead edge and network security strategy, owning Cloudflare WAF, DDoS protection, and Zero Trust rollouts at scale. You will drive security architecture across AWS and the edge, and automate with policy-as-code while championing incident response and measurable risk reduction.

The role requires deep Cloudflare expertise, strong network design skills, and a generalist security mindset to partner with infrastructure and product teams.