Golang Job: Security Operations Engineer

About Us

At Cloudflare, we have our eyes set on an ambitious goal: to help build a better Internet. Today the company runs one of the world's largest networks that powers trillions of requests per month. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare have all web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was recognized by the World Economic Forum as a Technology Pioneer and named to Entrepreneur Magazine's Top Company Cultures list.

The security team at Cloudflare is focused and committed to helping secure both Cloudflare and our customers. The security operations team is responsible for helping keep all the moving parts in order while we work towards that goal.

We realize people do not fit into neat boxes. We are looking for curious and empathetic individuals who are committed to developing themselves and learning new skills, and we are ready to help you do that. We cannot complete our mission without building a diverse and inclusive team. We hire the best people based on an evaluation of their potential and support them throughout their time at Cloudflare. Come join us!

What you'll do

The security operations team collaborates with all parts of the security organization, helping the department operate smoothly and efficiently. This growing team, based in our Lisbon office, works with the product security, infrastructure security, Detection and Response, Governance Risk & Compliance, and Strategic Programs teams to ensure all of the tooling, software, and services necessary for a security team are operating efficiently, kept up to date, and providing value to the organization.

A security operations engineer's work includes triaging incoming reports from various programs (Incident Response, Vulnerability Management, Bug Bounty, Vendor Compliance), managing and configuring automated tooling (network scanners, code scanners, fuzzers, etc.), deploying changes with configuration management, or building automations for the team's processes.

Examples of desirable skills, knowledge and experience

Security operations engineers take part in a wide variety of tasks and projects across the broader security team. One individual is not expected to know everything, but a working knowledge in one or more of the following areas is required:

• Bug bounty systems, including triage, validation, and impact assessment
• Vulnerability report validation, criticality scoring, triage, and follow up as required
• Automated scanner configuration and report triage and validation
• Incident response, including triage and investigation of security incidents
• Workflow automation with tools like Jira
• Scripting experience (Bash, Python, Golang)

We are also looking for experienced security operations engineers with experience in the following areas:

• Advanced scripting experience (Bash, Python, Golang)
• DevOps and configuration management with tools like Terraform, Ansible, etc.
• Security testing web-based applications

The successful candidate will be self-motivated and results-driven, able to work independently and to collaborate with other teams, and capable of working in a fast-paced, high-volume environment.