Vulnerability Defense Software Engineer

Cloudflare

. Design, build, run, and scale distributed tools and services that translate security tradecraft into scalable, evidence-based systems and workflows .

Posted 10/2/2026full-timeUnited StatesMid-LevelSenior💰 $150,000 - $206,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in building and scaling distributed systems while translating complex security requirements into high-performance applications. Proficient in mentoring developers and promoting best practices for modular and reusable code.

Highest-signal resume keywords

Cybersecurity ConceptsVulnerability ResearchRESTful API DesignProduction-Ready Code in GoAI-Assisted Development

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Distributed SystemsVulnerability ResearchRESTful API DesignGRPC ServicesSQLPostgreSQLDebugging SkillsOptimization SkillsWell-Tested CodeAutomation

Soft Skills

MentoringCommunicationProblem-Solving

Industry Keywords

Incident Response WorkflowsThreat ModelingAttack TechniquesDefensive ControlsTrust Boundaries

Tech Stack

Tools & technologies

Cyber SecurityDistributed SystemsGRPCPostgresSQLTypeScriptGo

About the role

Key responsibilities & impact

Design, build, run, and scale distributed tools and services that translate security tradecraft into scalable, evidence-based systems and workflows
Partner with security practitioners to understand workflows, bottlenecks, and opportunities for automation
Improve system design and architecture to ensure stability, performance, and maintainability of internal and customer-facing services
Analyze, communicate, and help prioritize complex technical concepts across teams
Mentor and guide other developers, building collective technical expertise and promoting best practices for well-tested, modular, and reusable code
Address technical issues through possible on-call coverage outside standard working hours
Translate complex security requirements and investigative methods into robust, scalable, high-performance applications

Requirements

What you’ll need

Working knowledge of cybersecurity concepts such as threat modeling, attack techniques, trust boundaries, exploitability, and defensive controls
Familiarity with incident response workflows, network containment, and remediation
Practical experience in vulnerability research/exploit development and translating findings into actionable mitigations
Experience with AI-assisted development and designing agentic AI workflows
At least 5 years of experience building large-scale software applications, preferably distributed systems
Experience designing and integrating RESTful APIs and/or gRPC services
Knowledge of SQL and common relational database systems such as PostgreSQL
Ability to independently define and deliver solutions in ambiguous problem spaces
Prior experience writing production-ready code in Go and/or TypeScript
Excellent debugging and optimization skills
Expertise in writing well-tested code
Interest in opportunities to be a technical mentor for teammates
This position may require authorization to receive software or technology controlled under U.S. export laws without sponsorship for an export license

Benefits

Comp & perks

Equity plan participation
Medical/Rx Insurance
Dental Insurance
Vision Insurance
Flexible Spending Accounts
Commuter Spending Accounts
Fertility & Family Forming Benefits
On-demand mental health support and Employee Assistance Program
Global Travel Medical Insurance
Short and Long Term Disability Insurance
Life & Accident Insurance
401(k) Retirement Savings Plan
Employee Stock Participation Plan
Flexible paid time off covering vacation and sick leave
Leave programs, including parental, pregnancy health, medical, and bereavement leave