Latest AI JobsBrowse Jobs
Cloudflare logo

Senior Product Security Engineer

CloudflareHybridSecurity
Apply on company site
Salary
Not listed
Job type
Full-time
Posted
22 Jul 2026
Status
Open · checked 7d ago

About this role

Role Overview

The Senior Product Security Engineer at Cloudflare is a hybrid role based in Austin, US or London, UK, focusing on core software product security and vulnerability operations. This position suits an experienced security professional with a background in distributed cloud environments who is eager to integrate AI/LLM solutions into threat modeling and vulnerability management workflows.

Key Responsibilities

Autonomously drive AI security innovation by building and deploying AI-driven solutions to automate code analysis, optimize triage, and scale product security workflows.
Lead deep-dive security reviews and complex threat modeling sessions across distributed systems before product development begins.
Own the end-to-end lifecycle of product security findings, ensuring vulnerabilities are accurately triaged, routed to correct owners, and mitigated according to SLAs.
Oversee the technical triage and validation of the external Bug Bounty program, prioritizing submissions based on real-world exploitability.
Shape penetration testing scopes and act as the technical liaison to ensure remediation by development teams.
Mentor junior engineers and cultivate security champions within engineering organizations.

Requirements

Extensive, battle-tested experience in Product or Application Security within large-scale distributed cloud environments or SaaS platforms.
Demonstrated ability to build production-grade automation scripts and tools utilizing AI/LLMs to solve operational challenges.
Mastery of threat modeling methodologies like STRIDE to translate theoretical risks into actionable business context.
Proven track record of managing, routing, and driving vulnerability remediation across multi-stakeholder engineering organizations while enforcing SLAs.
Strong cross-functional leadership skills with the ability to influence senior engineering leaders and resolve ownership ambiguity.

Nice to Have

Familiarity with offensive security tooling and modern exploitation techniques used in professional penetration testing.
Experience scaling crowdsourced security programs on platforms like HackerOne or Bugcrowd, or optimizing agile project management workflows in JIRA.
Experience integrating hardware security features into production code bases.

Skills and Tools

AI/LLM integration and automation
Threat modeling (STRIDE)
Vulnerability management and bug bounty operations
Application and Product Security
Distributed systems security

Salary and Benefits

Comprehensive health and welfare benefits including medical, dental, vision insurance, flexible spending accounts, and commuter spending accounts.
Fertility and family forming benefits, plus on-demand mental health support and employee assistance programs.
Financial security via short and long-term disability, life and accident insurance, 401(k) retirement savings plan, and employee stock participation plan.
Generous time off including flexible paid time off for vacation and sick leave, alongside parental, pregnancy health, medical, and bereavement leave programs.
Eligibility to participate in Cloudflare’s equity plan.

About the Company

Cloudflare operates one of the world's largest intelligent global networks, protecting and accelerating internet applications without adding hardware, installing software, or changing code. Recognized for its top company culture and innovation, the company is dedicated to building a better internet. Cloudflare runs impactful public initiatives such as Project Galileo, the Athenian Project, and the 1.1.1.1 public DNS resolver to protect journalism, government election sites, and user privacy.

How to Apply

Interested candidates should submit their application through the official Cloudflare careers page.

Skills and tech stack

LLM

Questions candidates ask

What locations is this role available in?

This hybrid position is available in Austin, United States, and London, United Kingdom.

What are the primary responsibilities for this role?

The role involves leading security assessments, conducting threat modeling, owning vulnerability lifecycles, managing bug bounty triage, and building AI-driven solutions to automate product security workflows.

What qualifications are required for the Senior Product Security Engineer?

Candidates need extensive experience in Product or AppSec within distributed cloud environments, hands-on engineering experience with AI/LLMs for automation, mastery of threat modeling like STRIDE, and strong cross-functional communication skills.

What benefits does Cloudflare offer in the United States?

US-based employees receive medical, dental, and vision insurance, 401(k) plans, an employee stock participation plan, flexible paid time off, parental leave, and equity plan eligibility.

How can I apply for this position?

You can apply by visiting the official Cloudflare careers page.

Ready to apply?

The application is on the official Cloudflare careers page.

Apply on company site