Cloudforce One Detection & Mitigation Engineer

Hiring Location: Austin Texas, US About the Team Cloudforce One is Cloudflare’s threat operations and research team, responsible for identifying and disrupting cyber threats ranging from sophisticated cyber criminal activity to nation-state sponsored advanced persistent threats (APTs). The team analyzes unique data points at scale and efficiency, synthesizing findings into actionable threat intelligence to protect our customers. About the Role We are seeking a talented Detection & Mitigation Engineer to join us in growing our Cloudforce One Organization. You will be instrumental in building a proactive and threat intelligence-driven approach to protecting Cloudflare and its customers from sophisticated global threat actors. This position requires an innovative, self-starting, and detail-oriented problem solver with a passion for analyzing, tracking, and triaging malicious software. As a Detection Engineer, you will analyze and track adversaries to mitigate and disrupt cyber threat activity, supporting partner requests and proactive internal research. You will work alongside security research engineers and threat researchers to identify Tactics, Techniques, and Procedures (TTPs) of ongoing cyber attacks. Our ideal candidate will have 3-5 years of experience in detection engineering across endpoint and network detection response, with skills in triaging and analyzing common web and file formats. Experience in writing code to process malware samples and interacting with APIs is also preferred. Examples of Desirable Skills, Knowledge, and Experience: Proficiency in writing detection rules using Yara, Snort, and similar languages. Strong understanding of evaluating and improving detection rules, including monitoring false positives and negatives. Ability to detect a wide range of cyber threats including phishing and malware command & control. Experience analyzing payloads in web-based threat vectors. Experience in cybersecurity research and developing detection techniques. Passion for analyzing attacker TTPs and staying current with security trends. In-depth understanding of the cyber threat landscape and knowledge of threat actors. Skilled at communicating actionable threat intelligence to technical and executive stakeholders. Bachelor's degree in a relevant field and at least 3 years of experience in detection. Bonus Points: Proficiency in JavaScript/TypeScript. Familiarity with SQL-like syntax for querying databases. Experience tracking cyber campaigns using technical Indicators of Compromise (IOCs). Experience deploying detection rules across network and endpoint systems. Compensation Compensation may be adjusted depending on work location and level. Estimated annual salary of $110,000 - $134,000 USD Equity This role is eligible to participate in Cloudflare’s equity plan. Benefits Cloudflare offers a complete package of benefits to support you and your family. Below is a description of our benefits for employees in the United States. Health & Welfare Benefits Medical/Rx Insurance Dental Insurance Vision Insurance Flexible Spending Accounts Commuter Spending Accounts Fertility & Family Forming Benefits Mental health support and Employee Assistance Program Global Travel Medical Insurance Financial Benefits Short and Long Term Disability Insurance Life & Accident Insurance 401(k) Retirement Savings Plan Employee Stock Participation Plan Time Off Flexible paid time off covering vacation and sick leave Leave programs, including parental, medical, and bereavement leave #J-18808-Ljbffr