Network Security Engineer

Cloudflare is a company on a mission to help build a better Internet. They are seeking an experienced Network Security Engineer to support their largest and most technically sophisticated customers in resolving technical problems, threats, or attacks on their infrastructure.

Responsibilities:

• Serve as a trusted technical advisor for our enterprise customers, responding to and resolving inquiries and incidents related to network security and performance, while delivering timely, high-quality and personalized assistance
• Work directly with customers to diagnose, troubleshoot and resolve complex technical issues involving DDoS mitigation, firewall rules, SSL/TLS, network confirmation, and other security configurations
• Create and maintain knowledge base articles, technical guides, and troubleshooting documentation for internal and customer use
• Compare traffic signatures and attributes including IP addresses, cookie variations, HTTP headers, and JavaScript footprints to determine what is good traffic and what is malicious
• DDoS mitigation for OSI layers 3,4, & 7: advise customers on how to filter malicious traffic using Cloudflare tools like Magic Transit, Network Firewall, WAF, IP reputation lists, packet inspection, blocklisting, allowlisting, and rate limiting
• Work with Engineering and Product teams to improve products and tools
• Utilize generative AI and automation tools to streamline log analysis, accelerate root-cause analysis during security incidents, and optimize customer response times

Requirements:

• You have a minimum of 4 years experience working as a Network Security Engineer / Technical Support Engineer / Sr. Support Engineer supporting networking or web security products
• Exceptional troubleshooting and problem-solving skills, with the ability to simplify complex concepts for customers
• Strong customer service orientation and communication skills
• Ability to work independently and collaboratively in a fast-paced, dynamic environment
• Strong understanding of network protocols, including TCP/IP, DNS, HTTP/S, and BGP, with a particular focus on anycast routing concepts and implementation, as well as tools such as iptables and looking glass
• Proven experience troubleshooting network connectivity issues, BGP routing, and GRE tunnels, and performing packet capture analysis
• Confident with command line and tools, including curl, dig, traceroute, openssl, git
• Experience in a web development and / or hosting environment such as installing and configuring web servers like Apache, Nginx, Caddy and IIS
• You are competent at writing scripts in Bash, Python, JavaScript or other scripting languages
• You have worked with PostgreSQL, MySQL, MS SQL, and other database servers
• Bachelor's degree in Computer Science, Cybersecurity, or a related field (or equivalent experience)
• Relevant certifications such as CISSP, GCIA GCIH, GCFA, GCFE or equivalent