Principal Threat Architect — AI-Driven Security at Scale

Cloudflare; Austin (TX); On-site; USD 180,000 - 260,000; Full time

Benefits offered by this job

Health insurance

401(k) plan

Equity plan

Dental insurance

Vision insurance

Parental leave

Flexible PTO

Job summary

Cloudflare is seeking a Principal Engineer to architect and deploy scalable threat-detection systems across its global network. You will analyze adversaries, design data pipelines, and drive AI-assisted workflows to accelerate threat hunting and abuse mitigation.

You will also mentor teams, own on-call operations, and influence architectural decisions across multiple product lines and edge deployments.

Qualifications

• 15+ years of cyber security experience focusing on adversarial trends and threat intel.
• 10+ years operating large-scale distributed systems in production.
• Deep expertise in Go and TypeScript, Kubernetes, and edge computing platforms.

Responsibilities

• Drive architectural direction across Cloudforce One engineering and edge/edge+Kubernetes workloads.
• Identify bottlenecks and replace legacy patterns with scalable, reliable systems.
• Design data pipelines to ingest, enrich, and expose threat signals at scale.
• Collaborate across Threat Intelligence, Trust & Safety, Product, Legal and engineering teams.
• Mentor engineers and promote security-first design and operational excellence.
• Develop agentic AI workflows to accelerate threat hunting and detection engineering.

Skills

Threat intelligence

Distributed systems

Go

TypeScript

AI workflows

Detection engineering

Security architecture

Incident response

React

Terraform

Tools

Kubernetes

Cloudflare Workers

Kafka

Temporal

PostgreSQL

Redis

D1

SQLite

Job description

Cloudflare is seeking a Principal Engineer to architect and deploy scalable threat-detection systems across its global network. You will analyze adversaries, design data pipelines, and drive AI-assisted workflows to accelerate threat hunting and abuse mitigation.

You will also mentor teams, own on-call operations, and influence architectural decisions across multiple product lines and edge deployments.