# Senior Product Security Engineer

**Company:** [Cloudflare](https://hotfix.jobs/companies/cloudflare)
**Location:** Unspecified
**Role:** Security Engineering
**Experience:** 7+ years
**Skills:** Application Security, Threat Modeling, Vulnerability Management, bug bounty, Penetration Testing, AI, LLMs, Automation, stride, offensive security, Jira, hardware security
**Posted:** 2026-07-22

> Lead security assessments, threat modeling, and vulnerability operations for Cloudflare's core products. Drive AI-powered automation for triage and workflows while mentoring teams in large-scale distributed environments.

## Job Description

## Responsibilities
- Autonomously Drive AI Security Innovation: Proactively identify gaps in our current capabilities and independently architect, build, and deploy AI-driven solutions to automate code analysis, optimize triage, and scale Product Security workflows.
- Security Architecture & Threat Modeling: Lead deep-dive security reviews and complex threat modeling sessions across distributed systems, embedding strict security requirements into product designs before development begins.
- Product-Focused Vulnerability Management: Own the lifecycle of product security findings. Ensure vulnerabilities are accurately triaged, mapped to the correct engineering owner, and mitigated in alignment with established SLAs.
- Bug Bounty Leadership: Oversee the technical triage and validation of Cloudflare’s external Bug Bounty program, prioritizing submissions based on real-world exploitability and business risk.
- Pentest Strategy & Support: Shape the scope of internal and external penetration testing engagements, serving as the technical liaison to ensure findings are deeply understood and remediated by development teams.
- Strategic Influence & Mentorship: Act as a force-multiplier for security across Cloudflare; mentor junior engineers, cultivate security champions within engineering organizations, and establish modern, paved-road developer guardrails.

## Desirable Skills, Knowledge, and Experience
- Senior-Level Product/AppSec Expertise: Extensive, battle-tested experience in Product or Application Security within large-scale distributed cloud environments or SaaS platforms.
- Practical AI & Automation Engineering: Demonstrated ability to build production-grade automation scripts and tools. Must possess hands-on engineering experience leveraging AI/LLMs to solve operational or technical challenges.
- Advanced Threat Modeling & Risk Analysis: Mastery of threat modeling methodologies (e.g., STRIDE) and an analytical mindset capable of translating complex theoretical risks into prioritized, actionable business context.
- Vulnerability Lifecycle Ownership: Proven track record of managing, routing, and driving the remediation of vulnerabilities across multi-stakeholder engineering organizations while strictly enforcing SLAs.
- High Influence & Communication: Superb cross-functional leadership skills; the ability to confidently influence senior engineering leaders, resolve ownership ambiguity, and champion security initiatives without explicit authority.

## Bonus Points
- Offensive Mastery: Familiarity with offensive security tooling and modern exploitation techniques used during professional penetration testing.
- Program Management Experience: Experience scaling crowdsourced security programs (e.g., HackerOne, Bugcrowd) or optimizing agile project management workflows within JIRA.
- Experience in integrating hardware security features into production code bases.

## Compensation & Benefits
This role is eligible to participate in Cloudflare’s equity plan. Cloudflare offers a complete package of benefits and programs to support you and your family, including medical, dental, and vision insurance, a 401(k) plan with company match, flexible paid time off, and fertility & family-forming benefits.

## Similar roles

- [Senior DoD Product Security Engineer](https://hotfix.jobs/jobs/c5941ba2-f396-49af-a46d-263112f4a169) - Forterra - Clarksburg, MD
- [Senior Threat Engineer](https://hotfix.jobs/jobs/f065b632-672b-4637-8669-526d5c900162) - Coalition Security - Remote - $100k – $150k/yr
- [Senior Security Compliance Specialist](https://hotfix.jobs/jobs/00a845e2-4327-4275-ada6-9b953420c37d) - Cloudflare - Remote
- [Senior IAM Engineer](https://hotfix.jobs/jobs/a54619ea-22d6-4f1e-ab0e-bf3db137b74b) - Komodo Health - Remote - $150k – $210k/yr
- [Sr. Software Engineer](https://hotfix.jobs/jobs/fd2f1913-c150-4f35-b16f-327aa66fac6a) - Illumio - Sunnyvale, CA - $170k – $196k/yr

**Apply:** https://hotfix.jobs/jobs/921b5b0f-c2bc-4c6f-b83d-9a6fb45c1476
**Canonical:** https://hotfix.jobs/jobs/921b5b0f-c2bc-4c6f-b83d-9a6fb45c1476