Response Engineer

Responsibilities

• Monitor and investigate proactive security alerts via internal telemetry systems to identify infrastructure and application-layer attacks.
• Apply mitigation steps and filter malicious traffic using core security tools, including Magic Transit, WAF, and Rate Limiting.
• Review incoming alerts to determine urgency and scope while maintaining accurate incident tracking tickets.
• Communicate technical updates clearly and professionally with enterprise customers via chat, email, and phone during active incidents.
• Adhere to strict customer SLAs for alert response times, event analysis, and operational communications.
• Maintain and update customer-specific runbooks, threshold rules, and escalation matrices.
• Collaborate with Engineering and Product teams to provide feedback on tools and suggest improvements for alert rules.

Requirements

• 2–5 years of hands-on experience in a SOC, technical support engineering, or network operations environment.
• Strong understanding of networking principles and protocols, including TCP/IP, UDP, ICMP, DNS, and BGP.
• Experience analyzing network traffic data for anomaly detection and executing mitigation protocols against L3/L4 or L7 attacks.
• Proficiency using the command line (Bash shell) and general system administration across Linux, Mac, or Windows.
• Proven experience in customer-facing technical support with the ability to assist stakeholders during high-pressure incidents.

Preferred Qualifications

• Hands-on experience with packet capture and network analysis tools such as tcpdump or Wireshark.
• Foundational scripting skills, preferably in Python, to automate operational workflows.
• Familiarity with querying datasets via APIs/GraphQL or monitoring metrics in Prometheus and Grafana.
• Relevant industry certifications such as CompTIA Security+, CCNA, or GIAC credentials.

About the Company

Cloudflare is on a mission to help build a better Internet. We run one of the world’s largest networks, protecting and accelerating Internet applications for millions of customers ranging from individual bloggers to Fortune 500 companies. Our Cloudforce One team is responsible for identifying and disrupting cyber threats, leveraging our massive global network to synthesize findings into actionable threat intelligence.