Cloudflare Security Engineer

Position Title: Cloudflare Security Engineer
Location: San Jose, CA
Let’s create our future together at The AES Group!

About The AES Group:
The AES Group is a premier technology consulting company that has been bringing businesses and talent together for over 20 years to deliver the most innovative technology solutions that create the most positive impact on society. AES has helped over 40 business enterprises, including Fortune 500 companies, engage their customers, empower their employees, and transform their business operations with the power of cloud, data, AI, and other emerging technologies.

Role Summary:

Seeking an experienced Cloudflare Security Engineer to manage, secure, and optimize enterprise web applications, APIs, and network traffic using Cloudflare's security platform. The ideal candidate will have deep expertise in Cloudflare WAF, DDoS protection, Zero Trust architecture, API security, and security automation.

Key Responsibilities:

• Manage and administer Cloudflare WAF, DDoS protection, DNS security, and security policies.
• Configure, tune, and optimize security rules to protect web applications and APIs.
• Implement and support Cloudflare Zero Trust, Access, Gateway, and mTLS solutions.
• Monitor security events and investigate threats, attacks, and anomalous activities.
• Review security exceptions and develop appropriate risk mitigation strategies.
• Integrate Cloudflare logs with SIEM and security monitoring platforms.
• Automate Cloudflare configurations and deployments using APIs and Terraform.
• Collaborate with application, infrastructure, and security teams to ensure secure deployments.
• Troubleshoot application access, performance, networking, and security-related issues.
• Establish and promote best practices for web, network, and application security.

Required Experience:

• 10+ years of Cybersecurity, Network Security, Application Security, or Infrastructure Security experience.
• Strong hands-on experience with Cloudflare Enterprise Security Services.
• Expertise in Cloudflare WAF, DDoS mitigation, Bot Management, and DNS security.
• Experience implementing Zero Trust Network Access (ZTNA), Cloudflare Access, and mTLS solutions.
• Strong understanding of OWASP Top 10, API Security, and Web Application Security principles.
• Experience integrating Cloudflare logs with SIEM platforms for monitoring and threat detection.
• Hands-on experience with Terraform, Infrastructure as Code (IaC), and Cloudflare APIs.
• Strong troubleshooting and incident response capabilities.
• Excellent communication and cross-functional collaboration skills.

Preferred Qualifications:

• Experience securing large-scale enterprise web applications and cloud environments.
• Knowledge of modern security frameworks and Zero Trust architectures.
• Experience with automation, scripting, and security orchestration.
• Cloudflare, Security, or Cloud certifications are highly preferred.

Success Criteria:
Successful implementation, optimization, and management of Cloudflare security controls, resulting in improved web application protection, reduced security risk, enhanced threat visibility, and secure access management across enterprise environments.