# Product Security Engineer

**Company:** [Cloudflare](https://hotfix.jobs/companies/cloudflare)
**Location:** Austin, TX
**Role:** Security Engineering
**Experience:** 5+ years
**Skills:** Application Security, product security, AI, LLMs, Threat Modeling, stride, Vulnerability Management, bug bounty, Penetration Testing, DevOps, secure coding, fuzzing, Jira
**Posted:** 2026-08-04

> The Product Security Engineer builds AI-driven security automation, conducts threat modeling and security reviews, manages vulnerability remediation, and triages bug bounty findings. The role requires 5+ years of product or application security experience in cloud or SaaS environments plus hands-on AI/LLM engineering experience.

## Job Description

## Responsibilities

- **Implement AI Security Solutions:** Identify process bottlenecks and build AI-driven tools or scripts to automate code analysis, optimize triage, and streamline product security workflows.
- **Security Reviews & Threat Modeling:** Conduct structured security reviews and threat modeling sessions, including STRIDE, across product features; define security requirements early in the development lifecycle.
- **Product Vulnerability Management:** Manage the operational lifecycle of product security findings. Verify vulnerabilities, map them to the correct engineering owner, and track mitigation in alignment with established SLAs.
- **Bug Bounty Triage:** Technically triage and validate external bug bounty submissions by verifying exploitability and evaluating business risk.
- **Pentest Coordination:** Support internal and external penetration testing engagements by reviewing findings, clarifying technical context, and assisting development teams with remediation strategies.
- **Engineering Collaboration:** Partner with DevOps and product teams as a security point of contact, helping developers implement secure coding practices.

## Requirements

- 5+ years of experience in Product or Application Security within large-scale distributed cloud environments or SaaS platforms.
- Demonstrated ability to build production-grade automation scripts and tools.
- Hands-on engineering experience leveraging AI and large language models to solve operational or technical challenges.
- Competency in threat modeling methodologies and evaluating code flaws for engineering and security impact.
- Experience tracking, routing, and driving software vulnerability remediation across engineering groups against defined SLAs.
- Strong collaboration and communication skills, including the ability to communicate technical security risks to software engineers and resolve ownership ambiguity.

## Nice-to-Haves

- Familiarity with modern exploitation techniques, fuzzing frameworks, or automated scanning utilities.
- Experience scaling crowdsourced security programs such as HackerOne or Bugcrowd.
- Experience optimizing agile project management workflows within JIRA.
- Experience integrating hardware security features into production codebases.

## Compensation & Benefits

- Eligible to participate in the company equity plan.
- Medical/Rx, dental, and vision insurance.
- Flexible spending and commuter spending accounts.
- Fertility and family-forming benefits.
- On-demand mental health support and employee assistance program.
- Global travel medical insurance.
- Short- and long-term disability insurance.
- Life and accident insurance.
- 401(k) retirement savings plan.
- Employee stock participation plan.
- Flexible paid time off covering vacation and sick leave.
- Leave programs, including parental, pregnancy health, medical, and bereavement leave.

## Similar roles

- [Product Security Engineer - QRA](https://hotfix.jobs/jobs/b17d7fd9-a657-4140-b506-13f20bae7281) - Zoox - Foster City, CA - $191k – $271k/yr
- [Security Operations Engineer](https://hotfix.jobs/jobs/85bd8ca0-ceb2-4577-bb0c-e5b2694452d0) - Front - San Francisco, CA - $180k – $260k/yr
- [Platform Engineer - Identity Infrastructure](https://hotfix.jobs/jobs/01847c9b-a97d-493b-8845-4217c020f052) - Palantir - Palo Alto, CA
- [Threat Intelligence Researcher (Cloud)](https://hotfix.jobs/jobs/43eb83d5-1e68-45c1-8f55-ba66f66b7288) - Wiz - Remote - $160k – $220k/yr
- [IT Manager](https://hotfix.jobs/jobs/9c31d15a-9357-4f04-b71e-d9cb83c69040) - Pave - San Francisco, CA - From $220k/yr

**Apply:** https://hotfix.jobs/jobs/e38e1888-9bc3-4295-8e52-b36f2b011a18
**Canonical:** https://hotfix.jobs/jobs/e38e1888-9bc3-4295-8e52-b36f2b011a18