Researcher, Web Security, Detection

Cloudflare

. Reverse-engineer bot tools, automation frameworks, and fraud kits .

Posted 9/18/2026full-timeNew York City • New York • United StatesMid-LevelSenior💰 $150,000 - $185,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in reverse engineering, bot detection, and automation frameworks, with a strong ability to translate adversary intelligence into actionable detection signals. Proficient in scripting with Python and/or JavaScript, and skilled in communicating complex technical concepts to diverse audiences.

Highest-signal resume keywords

Reverse EngineeringBot DetectionAutomation FrameworksScripting in PythonEthical Hacking

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Understanding of BotsKnowledge of HTTPKnowledge of TLSKnowledge of Browser InternalsKnowledge of FingerprintingKnowledge of CAPTCHAsAdversarial MindsetMitigation StrategiesBuilding Proofs-of-ConceptDetection Signal Development

Soft Skills

Clear CommunicationCollaboration

Industry Keywords

Fraud DetectionAutomation ToolsWeb Application SecurityDetection GapsAdversary Behavior

Tech Stack

Tools & technologies

JavaScriptPython

About the role

Key responsibilities & impact

Reverse-engineer bot tools, automation frameworks, and fraud kits
Probe Cloudflare’s detections as an attacker would and close detection gaps
Track the bot and fraud ecosystem, including tooling, marketplaces, and emerging techniques
Convert adversary intelligence into actionable detection signals
Develop heuristics, signatures, and detection ideas based on adversary behavior
Partner with Data Scientists and Engineers to implement detection ideas
Design mitigations that neutralize attackers while preserving detection signals
Automate manual investigation and rule-writing into scalable detection

Requirements

What you’ll need

Deep understanding of bots, automation, and tooling used to attack web applications at scale
Knowledge of HTTP, TLS, browser internals, fingerprinting, and CAPTCHAs
Knowledge of techniques used to evade fingerprinting and CAPTCHAs
Ethical hacking and reverse engineering experience or capability
Adversarial mindset
Ability to translate attacker research into concrete detection signals
Understanding of mitigation strategies that preserve detection signals
Comfortable scripting in Python and/or JavaScript
Ability to build proofs-of-concept and tooling
Clear communication of complex attacker behavior to technical and non-technical audiences
Ability to work in New York, NY
Offer may be conditioned on authorization to receive technology controlled under U.S. export laws without sponsorship for an export license

Benefits

Comp & perks

Equity plan participation
Medical/Rx Insurance
Dental Insurance
Vision Insurance
Flexible Spending Accounts
Commuter Spending Accounts
Fertility & Family Forming Benefits
On-demand mental health support and Employee Assistance Program
Global Travel Medical Insurance
Short and Long Term Disability Insurance
Life & Accident Insurance
401(k) Retirement Savings Plan
Employee Stock Participation Plan
Flexible paid time off covering vacation and sick leave
Leave programs, including parental, pregnancy health, medical, and bereavement leave