Threat Detection & Mitigation Engineer

AI Chopping Block; Austin, Northern (TX, KY); Hybrid; USD 130,000 - 180,000; Full time

Job summary

Cloudflare is seeking a Security Detections Engineer to identify, track, and defeat sophisticated threats across our platform. You will examine and mitigate threats in real time, leveraging emerging technologies to build detections that protect millions of users worldwide.

You will work with teammates to define TTPs, translate technical findings into actionable threat intelligence, and communicate insights to both technical and executive stakeholders.

Qualifications

• Experience in data analysis, metadata analysis, or network traffic analysis.
• Passion for analyzing attacker TTPs at varying levels.
• Ability to understand trends related to platform threats.
• Experience using a data analysis platform and rule configuration.
• Understanding of the cyber threat landscape and threat actors.
• Experience tracking cyber campaigns using IOCs.
• Knowledge of SQL and ability to write queries.
• Python or other scripting experience.
• Ability to present complex technical information clearly to non-technical audiences.
• Capable of communicating threat intelligence to executives.

Responsibilities

• Identify, track, and defeat sophisticated threats and abuse across our platform.
• Develop detections and rules to protect millions of users in real time.
• Collaborate with team members to present insights to technical and executive stakeholders.

Skills

Data analysis

Metadata analysis

Network analysis

Attacker TTPs

Security trends

Threat intel

SQL queries

Python scripting

Stakeholder comms

Threat hunting

Job description

Cloudflare is seeking a Security Detections Engineer to identify, track, and defeat sophisticated threats across our platform. You will examine and mitigate threats in real time, leveraging emerging technologies to build detections that protect millions of users worldwide.

You will work with teammates to define TTPs, translate technical findings into actionable threat intelligence, and communicate insights to both technical and executive stakeholders.