Network Security Engineer

About the role

Join our team to provide high-level technical support for enterprise clients facing complex infrastructure challenges. You will act as a primary advisor, resolving security incidents and performance issues across OSI Layers 3, 4, and 7.

Key facts

What you'll do

• Serve as a technical point of contact for enterprise clients, managing inquiries related to network performance and security.
• Troubleshoot and resolve issues involving SSL/TLS, firewall configurations, BGP routing, and DDoS mitigation.
• Analyze traffic patterns by examining HTTP headers, IP addresses, cookies, and JavaScript footprints to distinguish malicious activity.
• Advise customers on utilizing Magic Transit, WAF, IP reputation lists, packet inspection, and rate limiting.
• Develop technical documentation and knowledge base articles for internal and client use.
• Collaborate with Product and Engineering teams to enhance tools and services.
• Apply generative AI and automation to accelerate log analysis and root-cause identification.

Requirements

• Minimum 4 years of experience as a Network Security Engineer or Senior Support Engineer in networking or web security.
• Bachelor degree in Cybersecurity, Computer Science, or equivalent professional experience.
• Proficiency in network protocols including TCP/IP, DNS, HTTP/S, and BGP, with knowledge of anycast routing.
• Experience with packet capture analysis, GRE tunnels, and BGP routing troubleshooting.
• Competence with command-line tools such as dig, curl, traceroute, openssl, and git.
• Background in web hosting or development, including configuration of Nginx, Apache, Caddy, or IIS.
• Ability to write scripts in Python, Bash, JavaScript, or similar languages.
• Experience working with database servers like MySQL, PostgreSQL, or MS SQL.

Nice to have

• Certifications including CISSP, GCIA, GCIH, GCFA, or GCFE.

Skills & tools

• Networking: BGP, TCP/IP, DNS, HTTP/S, Anycast, GRE tunnels, iptables, looking glass
• Security: WAF, DDoS mitigation, Magic Transit, Spectrum, Rate Limiting, Packet inspection
• Scripting/Dev: Bash, Python, JavaScript, Git
• Web Servers: Nginx, Apache, Caddy, IIS
• Databases: MySQL, PostgreSQL, MS SQL
• Analysis: Curl, Dig, Traceroute, Openssl, Generative AI

Practical notes

• Applicants reaching the offer stage may be required to attend an in-person interview at a Cloudflare office or hub.
• This role may involve access to information subject to U.S. export control laws; offers may be contingent on authorization to access such technology without export license sponsorship.
• Cloudflare is an equal opportunity employer and provides reasonable accommodations for candidates with disabilities.