Response Engineer - PhishGuard

Responsibilities

• Conduct real-time monitoring of email threat queues to analyze sophisticated attacks flagged by automated systems.
• Investigate customer-reported submissions and execute proactive threat hunts targeting emerging patterns.
• Perform manual retraction or quarantine of verified malicious emails.
• Provide critical feedback to Detection Engineering to update machine learning models and contribute to global intelligence repositories.
• Identify nuanced threat patterns by correlating technical telemetry with behavioral indicators.
• Deliver direct crisis intervention and proactive notifications to customers regarding high-dollar BEC threats.
• Lead technical onboarding for new customers, configuring bespoke detection rules and custom allow/block lists.
• Guide customers through DMARC implementation journeys, including SPF and DKIM alignment audits.

Requirements

• Undergraduate degree in Computer Science, Information Security, Information Systems, or equivalent practical experience.
• 5+ years of experience tracking and analyzing complex cyber campaigns using technical indicators like Domains, IPs, and email headers.
• Proven expertise in investigating and defending against phishing, invoice fraud, and Business Email Compromise (BEC) attacks.
• Deep working knowledge of core email authentication protocols (SPF, DKIM, DMARC).
• Hands-on experience utilizing AI LLM tools to develop automations for analysis and productivity workflows.
• Excellent verbal and written English communication skills for translating technical threats into business intelligence.

Preferred Qualifications

• Relevant industry certifications such as GCIH, GCIA, CEH, or Security+.
• Technical familiarity with regular expressions, YARA rules, SQL, and malicious file format analysis.
• Prior experience working within a Managed Security Services Provider (MSSP) or customer-facing security consulting environment.
• Familiarity with the Cloudflare ecosystem, including Email Security, WAF, and Zero Trust architectures.

About the Company

Cloudflare is on a mission to help build a better Internet. We run one of the world’s largest networks, protecting and accelerating Internet applications for millions of customers ranging from individual bloggers to Fortune 500 companies. Our culture values curiosity, iteration, and the use of AI to solve the toughest problems on the web.