Response Engineer (Application & Network Security)

About the role

This position involves providing front-line technical monitoring and threat mitigation for premium enterprise clients within the Cloudflare Managed Defense Center. You will analyze real-time security events across OSI layers 3, 4, and 7 to protect complex customer infrastructure from sophisticated attacks.

Key facts

What you'll do

• Monitor internal telemetry to detect ongoing infrastructure and application-layer threats.
• Mitigate malicious traffic using tools such as Magic Transit, Web Application Firewall, and Rate Limiting.
• Evaluate alert urgency and validity while managing incident tracking tickets.
• Provide professional technical updates to enterprise customers via phone, email, and chat during incidents.
• Adhere to established service level agreements for response times and operational communication.
• Maintain and update runbooks, threshold rules, and escalation matrices.
• Provide feedback to product and engineering teams to improve detection capabilities.

Requirements

• 2 to 5 years of hands-on experience in network operations, technical support, or a Security Operations Center.
• Foundational knowledge of internet protocols and networking, specifically BGP, DNS, ICMP, UDP, and TCP/IP.
• Ability to analyze network traffic for anomalies and perform mitigation for L3, L4, or L7 attacks.
• Professional command line proficiency in Bash and general system administration skills for Windows, Mac, or Linux.
• Proven experience in customer-facing technical support roles handling high-pressure situations.

Nice to have

• Experience with network analysis or packet capture tools like Wireshark or tcpdump.
• Foundational scripting abilities, preferably in Python, for workflow automation.
• Familiarity with monitoring metrics in Grafana or Prometheus, or querying data via GraphQL/APIs.
• Relevant industry certifications such as CCNA, CompTIA Security+, or GIAC credentials like GCIA.

Skills & tools

• Bash, Python, Linux, Mac, Windows, TCP/IP, UDP, ICMP, DNS, BGP, Magic Transit, WAF, Rate Limiting, Wireshark, tcpdump, Prometheus, Grafana, GraphQL, APIs.

Practical notes

• This role may require access to information subject to U.S. export control laws; offers may be conditioned on authorization to access controlled technology without license sponsorship.
• Candidates reaching the offer stage may be required to attend an in-person interview at a Cloudflare office.
• Cloudflare is an equal opportunity employer and provides reasonable accommodations for applicants with disabilities upon request via hr@cloudflare.com.