Network Security Engineer

Tiger Advisory; United States; On-site; USD 140,000 - 190,000; Full time

Job summary

Tiger Advisory is seeking an experienced Cloudflare Security Engineer to design, implement, and operate the client’s Cloudflare security controls on an urgent engagement. You will work with infrastructure, application, and security operations teams to protect internet-facing applications, APIs, and users.

This is a hands-on role requiring quick contribution in the first week. You will configure WAF rules, manage DDoS protection, DNS, TLS, and Zero Trust, and support migrations from legacy

Qualifications

• 5+ years in security engineering, infrastructure security, or related roles.
• 2+ years hands-on Cloudflare enterprise experience (WAF, DDoS, Bot Management, DNS, TLS).
• Familiarity with Cloudflare Zero Trust (Access, Gateway, Tunnel).
• Experience with IaC tools to manage edge/security configurations.

Responsibilities

• Configure, tune, and maintain Cloudflare WAF rulesets and bot management.
• Manage DDoS protection, DNS, SSL/TLS, and certificate handling across zones.
• Implement Cloudflare Zero Trust for secure user and app access.
• Secure APIs with API Shield and mTLS where applicable.
• Manage Cloudflare config as code with Terraform and API.
• Integrate Cloudflare logs with SIEM (e.g., Splunk, Sentinel).
• Lead or support migrations of apps/zones to Cloudflare from legacy solutions.
• Produce documentation, runbooks, and communicate with stakeholders.

Skills

Security engineering

Network security

Incident response

Independent work

Education

Security+ / CISSP / CCSP

Tools

Terraform

Cloudflare

Cloudflare API

WAF / DDoS tooling

Job description

Start Date: Immediate Start

About the Opportunity

We are seeking an experienced Cloudflare Security Engineer to join an enterprise client on an urgent engagement. You will design, implement, and operate the client’s Cloudflare security controls. You’ll work with infrastructure, application, and security operations teams to protect internet-facing applications, APIs, and users. This is a hands‑on role for an engineer who can start contributing in the first week.

Key Responsibilities

• Configure, tune, and maintain Cloudflare WAF managed and custom rulesets, rate limiting, and Bot Management to stop application-layer attacks while keeping false positives low.
• Manage DDoS protection, DNS, SSL/TLS settings, certificates, and origin security across multiple zones.
• Implement and support Cloudflare Zero Trust, including Access, Gateway, and Tunnel, for secure user and application access.
• Secure APIs with API Shield, schema validation, and mTLS where applicable.
• Manage Cloudflare configuration as code with Terraform and the Cloudflare API, following change-control standards.
• Integrate Cloudflare logs into the client’s SIEM (Logpush to Splunk, Sentinel, or similar) and support detection, investigation, and incident response.
• Lead or support migrations of applications and zones onto Cloudflare from legacy CDN, WAF, or VPN solutions.
• Produce clear documentation, runbooks, and recommendations, and communicate effectively with technical and non‑technical stakeholders.

Required Qualifications

• 5+ years in security engineering, network security, or infrastructure security roles.
• 2+ years of recent, hands‑on Cloudflare enterprise experience, including WAF, DDoS, Bot Management, DNS, and SSL/TLS.
• Working knowledge of Cloudflare Zero Trust (Access, Gateway, Tunnel).
• Experience with Terraform or other infrastructure-as-code tools for managing edge and security configuration.
• Solid understanding of HTTP/S, TLS, DNS, TCP/IP, and common web attack techniques (OWASP Top 10).
• Experience supporting production environments, including incident troubleshooting under pressure.
• Ability to work independently with minimal ramp‑up time.

Preferred Qualifications

• Experience migrating from Akamai, Imperva, F5, Fastly, or AWS WAF to Cloudflare.
• Background in regulated industries such as financial services, healthcare, or legal.
• Relevant certifications (e.g., Security+, CISSP, CCSP, cloud security certifications).