# Senior Response Engineer - Cloudflare Managed Defense Center (CMDC)

**Company**: Cloudflare
**Location**: London
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Category**: Engineering
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/cloudflare/jobs/8164086?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_73abceea-7bb

## Description

The Senior Response Engineer (Network Security focused) within the Cloudflare Managed Defense Center (CMDC) serves as a core technical specialist within the proactive security team.

This position is built for a network security practitioner who thrives at the intersection of deep routing protocol investigation, edge-network defense, and strategic technical partnership.

The role is responsible for architecting responses to sophisticated infrastructure threats across OSI Layers 3, 4, and 7, ensuring global customers remain resilient against large-scale volumetric DDoS attacks and complex network-layer anomalies.

Responsibilities:

- Technical Escalation & Response: Acting as a subject matter expert for the Managed Defense Center during complex network security incidents, providing hands-on intervention for large-scale volumetric and protocol-based DDoS attacks when standard protocols are exceeded.

- Incident Architecture: Leading the technical response to sophisticated infrastructure threats, validating the efficacy of network mitigation rules, and ensuring stable, clean traffic delivery via BGP and GRE mechanisms.

- Detection Engineering: Designing, deploying, and tuning network attack detection logic, utilizing attack telemetry to stay consistently ahead of evolving DDoS methodologies and adversary tactics.

- Technical Communications: Driving high-touch technical dialogue with customer network teams during critical incidents, translating complex routing and attack flow data into actionable architectural advice.

- Operational Engineering & AI Integration: Designing and refining technical Managed Defense workflows, building AI-driven automated troubleshooting playbooks (particularly around BGP/GRE), and tuning alerting thresholds to create self-healing infrastructure responses.

- Forensics & Analysis: Utilizing internal telemetry, flow data, and specialized monitoring tools to perform deep-dive forensics on novel network attack vectors.

- Technical Coaching: Mentoring the Managed Defense team on advanced traffic analysis and security best practices, ensuring a high technical bar across the Managed Defense Center.

Desirable Skills, Knowledge, and Experience:

- Experience: A minimum of 8+ years of relevant hands-on experience specifically within the DDoS mitigation industry, Network Security Operations, or a highly technical infrastructure incident response environment.

- Protocol Sovereignty: A profound understanding of internet routing and encapsulation protocols. Expert-level knowledge of BGP (Border Gateway Protocol) and GRE (Generic Routing Encapsulation) reinjection, along with a deep ability to deconstruct TCP/IP, UDP, and ICMP traffic flows.

- Security Mastery: Proven ability to identify common network attacks and design robust mitigation strategies for complex volumetric DDoS, UDP/TCP based, and protocol exhaustion using edge-based security controls.

- Detection & Tuning: Demonstrated expertise in detection engineering, including the continuous tuning of network security rules and alerts to optimize defense efficacy and operational signal-to-noise ratios.

- AI Tooling & Automation: Proficiency in Python, Go, or Bash to automate network security workflows, with demonstrated experience leveraging AI/ML models or LLM APIs to build automated troubleshooting diagnostics and dynamic threat mitigations.

- System Literacy: Experience with monitoring platforms (e.g., Prometheus/Grafana) and querying large network datasets to operationalize contextual routing and security data.

- Certifications: Advanced networking and network security credentials such as Cisco CCNP, CCNP Security, or CCIE are highly valued.

## Skills

### Required
- BGP
- GRE
- TCP/IP
- DDoS mitigation
- Network Security
- Python
- Go
- Bash

### Nice to have
- Cisco CCNP
- CCNP Security
- CCIE

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/cloudflare/jobs/8164086?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)