Security Researcher

About Us

Cloudflare, on a mission to help build a better Internet, operates one of the world’s largest networks powering millions of websites and Internet properties for customers ranging from individual bloggers to Fortune 500 companies. Cloudflare protects and accelerates Internet applications without requiring hardware, software installation, or code changes. Internet properties powered by Cloudflare see improved performance and reduced spam and attacks as traffic is routed through Cloudflare’s global network. Cloudflare has been recognized on Entrepreneur Magazine’s Top Company Cultures list and by Fast Company as one of the World’s Most Innovative Companies.

We seek curious and empathetic individuals who are committed to developing themselves and learning new skills. We value diverse and inclusive teams and hire based on potential, supporting people throughout their time at Cloudflare. We invite you to join us.

Available locations: Austin, TX

Our research and analytics team focuses on email threats directed at Cloudflare Email Security customers. New email threats emerge continually as phishing remains a leading source of breaches. You will evaluate new threats and the efficacy of our email detections, learning how to stop new and novel techniques used by threat actors and ensuring our detections are targeted and highly effective. As part of the broader Intel team, the role will help develop new AI and machine learning models to scale system defenses and to scale our ability to evaluate customer detection feedback.

• Experience with email analysis
• Understand the latest security trends related to email-borne threats
• Submit IOCs to data pipeline based on external reports
• Define automations and software requirements for support tooling
• Define processes and procedures to create 24x7 coverage of miscategorizations
• Continually evaluate the quality of threat data feeds, maximize value from them, and evaluate new data sources
• Research observed IoCs and network behavior patterns and label data
• Work with data scientists to identify security threats and create machine learning models
• Be a team SME and resource for data scientists and developers building security products
• Become a subject matter expert for email threats and categorization data
• Define and implement metrics for product efficacy
  • Research and plan potential software, data science, or machine learning projects to improve false positive and false negative rates
  • Continually monitor data quality and propose solutions to data quality issues
• Write blog posts and communicate the Intel Team’s work internally and externally
• Execute daily operational tasks and define automations to streamline operations
• Collaborate to define technical requirements for security products
  • Research threats, exploits, and TTPs and work with engineers to build protective products

• Experience analyzing, tracking, and defending against phishing attacks
• Familiarity with regular expressions and applying them to track malicious activity
• Working knowledge of SQL and creating SQL queries
• Experience with detection development using YARA
• Working knowledge of email authentication protocols (SPF, DMARC, DKIM) and email header analysis
• Ability to use Git to create, edit, and review pull requests
• Basic front-end or full-stack development skills preferred but not required
• Knowledge of and passion for cybersecurity
• Knowledge of cybersecurity industry terms and concepts (e.g., MITRE ATT&CK Framework, Lockheed Martin Kill Chain) and ability to map threats to these models
• Strong networking knowledge and understanding of how the Internet works (DNS, HTTP, TCP/IP, TLS, public key encryption)
• Ability to communicate priorities to stakeholders and management when priorities change

We’re a highly ambitious, large-scale technology company with a soul, dedicated to protecting the free and open Internet.

Project Galileo : Since 2014, we’ve equipped more than 2,400 journalism and civil society organizations in 111 countries with tools to defend against attacks on their work, at no cost.

Athenian Project : In 2017, we created the Athenian Project to ensure state and local governments have high protection and reliability for free, so constituents can access election information and voter registration. We have provided services to more than 425 local government election websites in 33 states.

1.1.1.1 : We released 1.1.1.1 to improve Internet foundations by providing a faster, more secure, privacy-centric public DNS resolver. This public service never stores client IP addresses. We remain committed to our privacy principles and do not sell user data to advertisers or use it to target consumers.

Sound like something you’d like to be a part of? We’d love to hear from you

This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Any offer of employment may be conditioned on authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license.

Cloudflare is proud to be an equal opportunity employer. We are committed to providing equal employment opportunity for all people and value diversity and inclusiveness. All qualified applicants will be considered without regard to race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law. We are an AA/Veterans/Disabled Employer.

Cloudflare provides reasonable accommodations to qualified individuals with disabilities. If you require an accommodation to apply, please contact or visit Cloudflare’s offices for assistance.