Network Security Support Engineer

About the role

You own the end-to-end resolution of complex network security incidents for our largest customers, acting as the primary technical expert on OSI Layers 3, 4, and 7 mitigation strategies. You own the communication strategy for every interaction, ensuring that technical findings are translated into clear, actionable steps for customer engineering teams. You own the analysis of traffic anomalies, determining the boundary between legitimate user behavior and malicious campaigns using live data. You own the collaboration with internal Engineering and Operations groups to drive temporary workarounds and long-term product improvements. You own the documentation of every case to build institutional knowledge that prevents future escalations. You own the application of AI-native tooling to accelerate triage and reduce time-to-resolution for critical threats. You own the continuous learning of emerging attack patterns to keep our defensive posture ahead of bad actors. You own the advocacy for the customer experience while strictly adhering to Cloudflare's security and operational policies.

Key facts

What you'll do

Investigate and triage sophisticated network-layer attacks using deep packet inspection and traffic signature correlation.

Analyze IP addresses, cookie variations, HTTP headers, and JavaScript footprints to distinguish benign traffic from malicious sources.

Mitigate DDoS attacks across OSI layers 3, 4, and 7 by configuring Cloudflare tools such as Magic Transit, Network Firewall, and WAF.

Recommend and apply rate limiting, blocklisting, and allowlisting strategies to minimize service disruption for legitimate users.

Collaborate with Engineering and Operations teams to implement immediate mitigations and contribute to permanent fixes.

Partner with Product teams to surface recurring customer issues and influence the roadmap for security tooling.

Utilize command line utilities and network troubleshooting tools like curl, dig, traceroute, openssl, and git to diagnose issues.

Perform packet capture analysis to validate attack patterns and verify the effectiveness of mitigation actions.

Troubleshoot DNS misconfigurations, BGP routing anomalies, and GRE tunnel disruptions impacting customer connectivity.

Leverage lookglass interfaces and iptables rules to inspect network paths and filter rules in real time.

Requirements

Fluent English speaker is a mandatory requirement for this position.

Bring a minimum of 3 years of professional experience in technical support roles solving complex infrastructure issues.

Demonstrate a self-driven attitude and the ability to master new technologies, systems, and features with minimal supervision.

Possess a fundamental understanding of the Internet stack, including the OSI model and how protocols interact.

Show an advanced comprehension of internet protocols such as TCP and UDP and their behavior under stress.

Have a solid grounding in computer networking concepts, with hands-on experience using iptables and querying looking glass servers.

Prove experience in troubleshooting network connectivity issues, including BGP routing tables and GRE tunnel performance.

Conduct packet capture analysis to inspect payloads and headers for malicious indicators.

Comfortably work with command line tools including curl, dig, traceroute, openssl, and git in a production environment.

Troubleshoot DNS resolution problems, SSL/TLS certificate errors, and related security configurations.

Nice to have

Experience with Argo Smart Routing, Spectrum, and Cloudflare Magic Transit is a significant advantage.

Familiarity with Cloudflare's Web Application Firewall (WAF) rules and rate limiting configurations is strongly preferred.

Understanding of IP reputation lists, packet inspection methodologies, and blocklisting/allowlisting best practices.

Knowledge of how to interpret JavaScript challenges and cookie variations to identify automated bots.

Practical notes

This role is based in Austin, TX, and follows a hybrid work model balancing office and remote work.

Employment is full-time, and the position requires availability during standard business hours with flexibility for incident response.

Candidates must be authorized to work in the United States without sponsorship for this position.

About Cloudflare

Cloudflare is hiring for Network Security Support Engineer. The listing location is Hybrid.

This Network Security Support Engineer opening is posted for Hybrid.