Security Research Analyst, WAF Managed Rules
Recruiter Fit Breakdown & Candid Summary
Cloudflare is seeking a Security Research Analyst to join their WAF Managed Rules team to research web application attacks and build detection logic.
The ideal candidate has hands-on experience in web application security, vulnerability research, and detection engineering, coupled with strong HTTP protocol knowledge and fluency in SQL and Pyth
Candidates should also be comfortable leveraging AI tools fluently in their workflows while maintaining rigorous independent validation.
This role is well-suited for security professionals passionate about defensive engineering and vulnerability analysis, though those lacking web application security foundations or HTTP internals
Role Responsibilities
- 1Research web application threats and turn public CVEs, threat intelligence, customer reports, and internal telemetry into tested mitigations.
- 2Build and maintain managed rules to protect Internet properties from known vulnerabilities, emerging exploits, and new attack techniques.
- 3Analyze vulnerability advisories or proofs of concept, reproduce exploits in a controlled environment, and identify distinguishing request characteristics.
- 4Investigate large datasets using SQL and build research tools or automate analysis using Python, Go, or Rust.
- 5Collaborate with engineering, product, and customer-facing teams to improve coverage while minimizing false positives and disruption to legitimate traffic.
Skills Matrix
Must-Have Skills
Nice-to-Have Skills
Will an ATS filter reject your resume for this role?
Check your keyword match score, missing must-have skills, and formatting flags — before you apply.
No signups. Free check in 3 seconds.
Ready to submit your application?
Apply directly on Cloudflare's official job portal.