Cloudflare Security Engineer

Urgent contract Cloudflare / Terraform role, outside ir35, fully remote.

Can be based anywhere in UK or EU

CV should demonstrate:

• Your track record in application security with Cloudflare.

• How you go about setting up and protect OWASP.

• Self-sufficiency in IAAC – Infrastructure as a code, terraform, code

Job details:

Background

IT Security Engineer with a good to high level of expertise within Cloudflare WAF (Web Application Firewall) / Bot Management / Page Shield and other Cloudflare Layer 7 security solutions.

Desired knowledge, experience, competence, skills, etc.:

• Good understanding of Cloudflare Products

• Understanding of OWASP Top Ten, threats and vulnerabilities, and tactics used to compromise applications.

• Proficiency with applications, databases, web services, authentication, and middleware servers.

• Fundamental knowledge and experience with threat intelligence, DDoS, Bot mitigation, and content delivery networks (CDN).

• Demonstrated understanding of cross-site request forgery, cross-site scripting, directory traversal, remote code execution, SQLi, session IDs, and authentication and authorization abuse.

• Fundamental understanding of reverse proxy, load balancing, SSL interception, and networking.

• Ability to analyze traffic and make decisions on the traffic.

• Basic networking understanding.

• Good soft skills that align well with company values and the “right” mindset

• Bonus: Good understanding of ethical hacking.

• Bonus: Good understanding of scripting and query languages.

• Bonus: Good understanding of Cloud Native WAF technologies (Google/Azure/AWS/AliCloud).

Cloudflare-Specific Services Mapped:

• IP/GEO Firewall → Cloudflare Firewall Rules & Network Firewall

• DDoS Protection → Cloudflare DDoS Protection (Magic Transit & HTTP DDoS Protection)

• API Request Constraints → Cloudflare API Gateway & Rate Limiting

• Client Reputations → Cloudflare Threat Intelligence & Security Analytics

• BOT Manager (On-boarding and configuration) → Cloudflare Bot Management

• Account protection and in-browser protection → Cloudflare Turnstile & Page Shield

Send your CV for more info