Senior Product Security Engineer - AI-Driven Vulnerability Ops

Cloudflare; Austin (TX); On-site; USD 180,000 - 230,000; Full time

Benefits offered by this job

Equity plan

Health insurance

401(k) Retirement Savings Plan

Employee Stock Participation Plan

Job summary

Cloudflare is seeking a Senior Product Security Engineer to drive AI-powered security automation and oversee vulnerability operations across core products. You will partner with engineering teams to embed security into design, triage findings, and guide remediation within SLAs.

The role emphasizes architectural reviews, bug bounty leadership, and mentoring security champions while leveraging AI tooling to scale security workflows at Cloudflare.

Qualifications

• Senior-level Product/AppSec experience in large-scale distributed cloud or SaaS environments.
• Hands-on engineering with AI/LLMs to automate security workflows.
• Strong threat modeling (STRIDE) and risk analysis skills.
• Proven track record in managing vulnerabilities across multiple teams with SLAs.
• Excellent cross-functional communication with senior engineering leaders.

Responsibilities

• Autonomously drive AI security innovations to automate code analysis and triage.
• Lead security architecture reviews and threat modeling across distributed systems.
• Own vulnerability lifecycle management and SLA-aligned remediation.
• Oversee bug bounty triage and validation for external submissions.
• Shape pentest strategy and serve as liaison to ensure remediation by dev teams.
• Mentor engineers and establish secure development guardrails.

Skills

Product/AppSec Expertise

AI Automation

Threat Modeling

Vulnerability Lifecycle

Leadership & Communication

Tools

HackerOne/Bugcrowd

SAST Tools

AI/LLM Tooling

Job description

Cloudflare is seeking a Senior Product Security Engineer to drive AI-powered security automation and oversee vulnerability operations across core products. You will partner with engineering teams to embed security into design, triage findings, and guide remediation within SLAs.

The role emphasizes architectural reviews, bug bounty leadership, and mentoring security champions while leveraging AI tooling to scale security workflows at Cloudflare.