Senior Product Security Engineer

Cloudflare, Inc

Confirmed live today High trust
Hybrid

Quick summary

Work type
Hybrid
Location
Austin, TXLondon, United Kingdom, United Kingdom
Posted
97 days ago
Freshness
Confirmed live today

Market check

Salary context

How this pay compares to similar roles

Similar $187k
$139k $245k
below market most similar roles pay here above market

This listing doesn't post a salary. Most similar roles pay $155,000–$218,650.

Based on 240 similar postings.

Employer

About Cloudflare, Inc

Cloudflare is a prominent cloud services and security company that provides content delivery network (CDN), DDoS mitigation, and Zero Trust security services to millions of internet properties.

Cloudflare, Inc currently has 110 open roles on FindRole.

Listed pay typically runs $194,000–$266,000 across 56 roles with salary data.

Most-posted roles

View all roles at Cloudflare, Inc

At a glance

TL;DR · Senior Product Security Engineer

The Senior Product Security Engineer joins the security team to lead assessments and vulnerability operations for core software products. This role involves analyzing system architecture, performing threat modeling for new features, and managing the full lifecycle of security findings to ensure mitigation within established SLAs. Day-to-day tasks include conducting deep-dive security reviews, triaging complex bug bounty submissions, and collaborating with engineering teams to resolve vulnerabilities from SAST, fuzzing, and penetration tests. The successful candidate will write code to integrate AI/LLM solutions for automated triage and data enrichment. Key requirements include expertise in distributed cloud environments, mastery of STRIDE threat modeling, and practical experience in automation engineering. This position addresses the technical challenge of scaling product security workflows and maintaining robust security guardrails across large-scale distributed systems.

What you'll do

  • Lead deep-dive security reviews and complex threat modeling sessions for distributed systems.
  • Own the lifecycle of product security findings by triaging and routing vulnerabilities to engineering owners.
  • Ensure all security vulnerabilities are mitigated within established service level agreements.
  • Oversee the technical triage and validation of external bug bounty submissions.
  • Shape the scope of internal and external penetration testing engagements.
  • Architect and deploy AI-driven solutions to automate code analysis and scale security workflows.
  • Mentor junior engineers and establish security guardrails within engineering organizations.

What we're looking for

  • Lead security assessments, threat modeling, and vulnerability operations for core software products.
  • Analyze system architecture and embed security requirements into product designs before development.
  • Manage the full vulnerability lifecycle, including triage, routing, and remediation within established SLAs.
  • Oversee technical triage and validation for the external Bug Bounty program.
  • Shape the scope of internal and external penetration testing engagements.
  • Write code and integrate AI/LLM solutions to automate security triage and data enrichment.
  • Extensive experience in Product or Application Security within large-scale distributed cloud or SaaS environments (preferred).
  • Demonstrated ability to build production-grade automation scripts and tools using AI/LLMs (preferred).
  • Mastery of threat modeling methodologies like STRIDE and advanced risk analysis (preferred).
  • Authorization to receive software or technology controlled under U.S. export control laws.

More like this

Similar roles

Product Security Engineer

Cloudflare, Inc

Austin, TX +1 84 days ago
AI LLM SAST Fuzzing STRIDE Threat Modeling Penetration Testing Bug Bounty JIRA DevOps Agile Product Security Application Security Vulnerability Management
5+ yrs exp Hybrid

Senior Product Security Engineer

Adobe

San Jose, CA 39 days ago $144,800–$261,450
Application Security OWASP Top 10 Python Burp Suite PowerBI JIRA AWS Lambda API Gateway REST API OAuth2 SQL Injection XSS SSRF IDOR CVSS v3.1 SOAR Penetration Testing curl
5+ yrs exp

Senior Product Security Engineer

PayPal

Austin, TX +1 47 days ago $130,500–$193,600
Python Go Bash Java Javascript Kubernetes Terraform GCP CI/CD SAST SCA Secrets Detection SLSA SBOM Policy-as-Code DevSecOps
3+ yrs exp Hybrid

Senior Product Security Engineer

PayPal

Austin, TX +1 47 days ago $130,500–$193,600
Python Go Java Javascript Bash Kubernetes Terraform GCP CI/CD SAST SCA Secrets Detection SLSA SBOM Policy-as-Code DevSecOps Telemetry Metrics
3+ yrs exp Hybrid

Senior Software Engineer, Product Security

Plaid

San Francisco, CA 109 days ago $204,156–$281,196
Application Security Vulnerability Management Secure Development Lifecycle Penetration Testing Cloud Security CI/CD AWS Kubernetes Terraform Distributed Systems Microservices Data Encryption Key Management Secret Management User Authentication Authorization Systems Security Policy Enforcement
5+ yrs exp

Senior Software Engineer, Product Security

Plaid

Seattle, WA +2 109 days ago $204,156–$281,196
Application Security Vulnerability Management Secure Development Lifecycle Penetration Testing Cloud Security CI/CD AWS Kubernetes Terraform Distributed Systems Microservices Data Encryption Key Management Secret Management User Authentication Authorization Systems Security Policy Enforcement
5+ yrs exp