System Engineer, Behavioral Analysis

Cloudflare, Inc

Confirmed live today High trust

Hybrid

Quick summary

Work type: Hybrid
Location: Austin, TXNew York, NY
Salary: $150,000–$206,000 / yr
Posted: 2 days ago
Freshness: Confirmed live today
Nearby: 99+ roles within 25 mi

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $177k

This role $178k

$124k most similar roles pay here $222k

This role pays more than 64% of similar roles. Most pay $142,400–$212,493 — the shaded band above. At the midpoint, this role pays about $178k versus about $177k for comparable roles.

Based on 240 similar postings.

Employer

About Cloudflare, Inc

Cloudflare is a prominent cloud services and security company that provides content delivery network (CDN), DDoS mitigation, and Zero Trust security services to millions of internet properties.

Cloudflare, Inc currently has 94 open roles on FindRole.

Listed pay typically runs $189,500–$255,500 across 42 roles with salary data.

Most-posted roles

View all roles at Cloudflare, Inc

At a glance

TL;DR · System Engineer, Behavioral Analysis

Role Posting Log in to save

As a System Engineer, Behavioral Analysis on the UEBA team, you will build and operate production services to transform raw signals into high-fidelity user-risk events for Cloudflare One. You will develop behavioral detections for DNS activity or data movement, manage risk scores, and improve investigation clarity for customers. Your daily work involves designing and scaling distributed systems focused on high availability and low latency while collaborating with product teams to define event contracts. The role requires proficiency in Go, Rust, or C/C++, along with experience in PostgreSQL or ClickHouse. You will navigate complex data-intensive services, including Kafka, Kubernetes, and high-volume event processing. This position solves the challenge of making massive amounts of security signals actionable for practitioners by identifying unusual patterns across access, gateway, and network telemetry to protect against potential threats.

Skills

Go Rust C++ PostgreSQL ClickHouse Kafka Kubernetes Distributed Systems DNS HTTP Zero Trust SASE Anomaly Detection

What you'll do

Build production-ready behavioral detections by turning product requirements and telemetry into actionable security signals.
Develop systems to connect detection outputs with event history and logs for clearer customer investigations.
Architect, deploy, and maintain robust distributed systems focused on high availability and horizontal scalability.
Manage the full project lifecycle including design, implementation, testing, rollout, and operational follow-through.
Perform capacity planning and proactive system health monitoring to ensure maximum uptime and reliability.
Define data dependencies and evaluation methods to assess signal quality before releasing new features.

What we're looking for

Authorization to receive software or technology controlled under U.S. export control laws is required.
Proficiency in at least one systems programming language such as Go, Rust, C, or C++ is required.
3+ years of professional experience building, testing, and operating backend or distributed systems in production is required.
3+ years of practical experience with databases and data-intensive services like PostgreSQL or ClickHouse is required.
Experience reasoning about event-driven systems including message delivery, state, and failure recovery is required.
Ability to use metrics, logs, traces, profiling, and experiments to understand production behavior is required.
Experience with security analytics, fraud/abuse detection, identity, Zero Trust, SASE, or network telemetry (preferred).
Familiarity with Kafka, Kubernetes, high-volume event processing, or distributed state systems (preferred).