Senior Response Engineer - Cloudflare Managed Defense Center (CMDC)
Hybrid
Posted 4d ago
About the job
Cloudflare is seeking a Senior Response Engineer to join its Managed Defense Center (CMDC). This role is for a network security expert who excels at investigating routing protocols, defending edge networks, and forming strategic technical partnerships. You will be responsible for designing responses to complex infrastructure threats across various OSI layers, ensuring global customers are protected from large-scale DDoS attacks and unusual network activity. You will act as a key technical advisor, providing advanced support and strategic intelligence for Cloudflare's most critical customer environments. This involves a deep understanding of infrastructure protection, including BGP routing, network protection services, DDoS mitigation, firewall configurations, and connectivity troubleshooting.
Responsibilities
- Provide advanced assistance and strategic intelligence for sophisticated customer environments.
- Architect responses to infrastructure threats across OSI Layers 3, 4, and 7.
- Ensure global customers remain resilient against large-scale volumetric DDoS attacks and complex network-layer anomalies.
- Master infrastructure protection components, including BGP routing and advertisement control.
- Manage network protection services like Magic Transit, IPFLOW-based Magic Network Monitoring, Advanced TCP/UDP protection, DDoS mitigation rulesets, and firewall configurations.
- Troubleshoot connectivity over GRE, IPsec, and CNI.
- Extend support across broader Managed Defense activities with knowledge of application security, CDN technology, and Web Application Firewalls.
- Elevate the team's skill set by acting as a 'player-coach', providing hands-on technical guidance during live incidents.
- Review complex mitigation strategies.
- Analyze infrastructure threats using advanced internal telemetry to engineer informed mitigation strategies, focusing on DDoS vectors and BGP routing anomalies.
Requirements
- Network security practitioner with deep routing protocol investigation skills.
- Experience with edge-network defense and strategic technical partnership.
- Mastery of infrastructure protection components (Cloudflare native services or industry equivalents).
- Experience with BGP routing and advertisement control (managing prefix advertisement and de-advertisement).
- Experience with network protection services (e.g., Magic Transit, Magic Network Monitoring, Advanced TCP/UDP protection, DDoS mitigation rulesets, firewall configurations).
- Experience with Layer 4 proxies (e.g., Spectrum, DNS Firewall).
- Experience with connectivity troubleshooting over GRE, IPsec, and CNI.
- Working knowledge of application security (including CDN technology and Web Application Firewalls).