Network Security Engineer

Tiger Advisory is recruiting a Cloudflare Security Engineer for an enterprise client. The role designs, implements, and operates Cloudflare security controls, protecting internet-facing applications, APIs, and users while supporting infrastructure, application, and security operations teams.

Responsibilities:

• Configure, tune, and maintain Cloudflare WAF managed and custom rulesets, rate limiting, and Bot Management to stop application-layer attacks while keeping false positives low
• Manage DDoS protection, DNS, SSL/TLS settings, certificates, and origin security across multiple zones
• Implement and support Cloudflare Zero Trust, including Access, Gateway, and Tunnel, for secure user and application access
• Secure APIs with API Shield, schema validation, and mTLS where applicable
• Manage Cloudflare configuration as code with Terraform and the Cloudflare API, following change-control standards
• Integrate Cloudflare logs into the client’s SIEM (Logpush to Splunk, Sentinel, or similar) and support detection, investigation, and incident response
• Lead or support migrations of applications and zones onto Cloudflare from legacy CDN, WAF, or VPN solutions
• Produce clear documentation, runbooks, and recommendations, and communicate effectively with technical and non-technical stakeholders

Requirements:

• 5+ years in security engineering, network security, or infrastructure security roles
• 2+ years of recent, hands-on Cloudflare enterprise experience, including WAF, DDoS, Bot Management, DNS, and SSL/TLS
• Working knowledge of Cloudflare Zero Trust (Access, Gateway, Tunnel)
• Experience with Terraform or other infrastructure-as-code tools for managing edge and security configuration
• Solid understanding of HTTP/S, TLS, DNS, TCP/IP, and common web attack techniques (OWASP Top 10)
• Experience supporting production environments, including incident troubleshooting under pressure
• Ability to work independently with minimal ramp-up time
• Experience migrating from Akamai, Imperva, F5, Fastly, or AWS WAF to Cloudflare
• Cloudflare Workers or scripting experience (JavaScript, Python, Bash)
• SIEM/SOC integration experience
• Background in regulated industries such as financial services, healthcare, or legal
• Relevant certifications (e.g., Security+, CISSP, CCSP, cloud security certifications)