System Engineer - Behavioral Analytics & Risk Detections

Cloudflare, Inc.; San Francisco (CA); On-site; USD 136,000 - 187,000; Full time

Job summary

Cloudflare is seeking a Systems Engineer to build and operate production services for UEBA. You will implement detections for unusual DNS activity and data movements, improve how events feed into a user's risk score, and make risk history accessible to customers.

You will own defined projects from design through rollout and support. You will work with Product and engineering teams across Access, Gateway, Analytics and Reporting, Logs, and other data-producing teams to ensure end-to-end

Qualifications

• 3+ years of professional experience building, testing, and operating backend or distributed systems in production.
• Strong proficiency in at least one systems programming language (Go, Rust, or C/C++).
• 3+ years of practical experience with databases and data-intensive services (e.g., PostgreSQL, ClickHouse).
• Experience reasoning about event-driven systems: messages, duplicates, state, and safe changes.
• Clear written and verbal communication with product and engineering partners.
• Experience using metrics, logs, traces, and profiling to understand production behavior.
• Bring strong opinions and be ready to revise views with data.

Responsibilities

• Build behavioral detections across signals like Access, Gateway, DNS, and data protection.
• Connect detection output to event history, logs, and customer investigations.
• Design, deploy, and maintain robust distributed infrastructure for high availability.
• Collaborate with Product and engineers across multiple teams to align event contracts.
• Participate in architecture reviews, capacity planning, and proactive health monitoring.

Skills

Backend systems

Distributed systems

Go

Rust

C/C++

Databases

PostgreSQL

ClickHouse

Event-driven design

Metrics & observability

Communication

Tools

Kafka

Kubernetes

Prometheus

Job description

Cloudflare is seeking a Systems Engineer to build and operate production services for UEBA. You will implement detections for unusual DNS activity and data movements, improve how events feed into a user's risk score, and make risk history accessible to customers.

You will own defined projects from design through rollout and support. You will work with Product and engineering teams across Access, Gateway, Analytics and Reporting, Logs, and other data-producing teams to ensure end-to-end