Product Security Engineer

Cloudflare, Inc

Confirmed live yesterday High trust
Hybrid

Quick summary

Work type
Hybrid
Location
Austin, TXLondon, United Kingdom, United Kingdom
Posted
84 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

How this pay compares to similar roles

Similar $182k
$130k $232k
below market most similar roles pay here above market

This listing doesn't post a salary. Most similar roles pay $147,362–$216,000.

Based on 240 similar postings.

Employer

About Cloudflare, Inc

Cloudflare is a prominent cloud services and security company that provides content delivery network (CDN), DDoS mitigation, and Zero Trust security services to millions of internet properties.

Cloudflare, Inc currently has 110 open roles on FindRole.

Listed pay typically runs $194,000–$266,000 across 56 roles with salary data.

Most-posted roles

View all roles at Cloudflare, Inc

At a glance

TL;DR · Product Security Engineer

JOB TITLE: Product Security Engineer As a Product Security Engineer, you will join the team to support security assessments and vulnerability operations for core software products. You will analyze system architecture, perform threat modeling using methodologies like STRIDE, and manage the operational lifecycle of security findings to ensure mitigation within established SLAs. Your daily work involves triaging complex bug bounty submissions, conducting deep-dive security reviews on new features, and collaborating with DevOps and product teams to implement secure coding practices. You will write code to build internal AI/LLM tools and scripts that automate triage and data enrichment. The role requires expertise in product security, vulnerability research, and systems security within large-scale distributed cloud environments or SaaS platforms, utilizing tools like fuzzing frameworks and automated scanning utilities to solve technical security challenges.

What you'll do

  • Conduct structured security reviews and threat modeling sessions for new product features.
  • Manage the operational lifecycle of product security findings to ensure timely mitigation.
  • Perform technical triage and validation of external Bug Bounty submissions to evaluate risk.
  • Build AI-driven tools and scripts to automate code analysis and streamline security workflows.
  • Support internal and external penetration testing by reviewing findings and assisting with remediation.
  • Partner with DevOps and product teams to help developers implement secure coding practices.

What we're looking for

  • Conduct security reviews and threat modeling sessions using methodologies like STRIDE.
  • Manage the product vulnerability lifecycle, including triage, routing, and mitigation within SLAs.
  • Perform technical triage and validation of external bug bounty submissions.
  • Support internal and external penetration testing engagements and remediation strategies.
  • Write code and integrate AI/LLM solutions to automate security workflows and data enrichment.
  • 5+ years of experience in Product or Application Security within large-scale distributed cloud environments or SaaS platforms (preferred).
  • Demonstrated ability to build production-grade automation scripts and tools using AI/LLMs (preferred).
  • Authorization to receive software or technology controlled under U.S. export control laws.

More like this

Similar roles

Senior Product Security Engineer

Cloudflare, Inc

Austin, TX +1 97 days ago
Product Security Application Security AI LLM Threat Modeling STRIDE SAST Fuzzing Penetration Testing Vulnerability Management Bug Bounty JIRA Distributed Systems Agile
Hybrid

Senior Product Security Engineer

Adobe

San Jose, CA 39 days ago $144,800–$261,450
Application Security OWASP Top 10 Python Burp Suite PowerBI JIRA AWS Lambda API Gateway REST API OAuth2 SQL Injection XSS SSRF IDOR CVSS v3.1 SOAR Penetration Testing curl
5+ yrs exp

Senior Product Security Engineer

PayPal

Austin, TX +1 47 days ago $130,500–$193,600
Python Go Bash Java Javascript Kubernetes Terraform GCP CI/CD SAST SCA Secrets Detection SLSA SBOM Policy-as-Code DevSecOps
3+ yrs exp Hybrid

Senior Product Security Engineer

PayPal

Austin, TX +1 47 days ago $130,500–$193,600
Python Go Java Javascript Bash Kubernetes Terraform GCP CI/CD SAST SCA Secrets Detection SLSA SBOM Policy-as-Code DevSecOps Telemetry Metrics
3+ yrs exp Hybrid

Product Security Engineer

Adobe

New York, NY +2 161 days ago
Python JavaScript React FastAPI Redis Kubernetes Argo Azure OpenAI LLM Prompt Engineering Retrieval-Augmented Generation Vector Databases CI/CD Git Azure GitHub Copilot Cursor Secure SDLC Threat Modeling
4+ yrs exp

Software Product Security Engineer

HP Inc.

Spring, TX 63 days ago $123,100–$150,400
C/C++ C# .NET ASP.NET Core JavaScript TypeScript ReactJS Python Go Rust Django WPF XAML HTML5 CSS3 JSON Microsoft Azure AWS Google Cloud Platform Docker CI/CD Azure DevOps RESTful APIs Unit Testing Windows Registry Sockets Multi-threading