WAF Security Researcher — Managed Rules

Cloudflare, Inc.; Austin (TX); Hybrid; USD 150,000 - 216,000; Full time

Benefits offered by this job

Equity

Health & Welfare Benefits

401(k) Plan

Flexible PTO

Job summary

Cloudflare, Inc. is seeking a Security Research Analyst to research web application threats and develop robust WAF managed rules.

You will transform CVEs, threat intel, customer reports, and telemetry into tested mitigations that protect millions of sites on Cloudflare’s global network. You’ll work through the detection lifecycle, validate against malicious and legitimate requests, and collaborate with Engineering, Product, and other teams to close coverage gaps and improve overall protection

Qualifications

• Hands-on web application security, vulnerability research, or detection engineering experience.

Responsibilities

• Research vulnerabilities and exploitation to improve WAF protections.
• Develop and maintain managed rules and exploit signatures.
• Analyze false positives and missed attacks to improve protections.

Skills

Web security

SQL analysis

Python

Go

Rust

Tools

ClickHouse

Grafana

Linux

Job description

Cloudflare, Inc. is seeking a Security Research Analyst to research web application threats and develop robust WAF managed rules.

You will transform CVEs, threat intel, customer reports, and telemetry into tested mitigations that protect millions of sites on Cloudflare’s global network. You’ll work through the detection lifecycle, validate against malicious and legitimate requests, and collaborate with Engineering, Product, and other teams to close coverage gaps and improve overall protection