Description
About the Role
Security is at the heart of Cloudflare's mission to help build a better Internet. The Security Governance, Risk and Compliance team (GRC) is a sub-team of Security, responsible for ensuring that Cloudflare has the right controls in place to secure its systems and customer data.
Responsibilities
- Automation & Engineering: Develop and implement automated solutions to improve GRC processes and operations, integrating with existing security, engineering, and AI tools. Build modules and maintain the GRC platform and other similar initiatives.
- AI Governance: Architect and maintain a technical governance framework for the safe deployment of autonomous AI agents, ensuring that agentic workflows operate within deterministic 'action gates' and predefined risk thresholds.
- Audit & Infrastructure: Support Cloudflare's security assessments (e.g., SOC 2, ISO 27001, PCI DSS, FedRAMP), treating 'Audit Readiness' as a product, and ensuring the global edge network remains compliant through automated drift detection and self-healing configurations.
- Security Integration: Work cross-functionally with Legal, People, Engineering, and Finance teams to integrate security into the fabric of the company, moving away from 'gatekeeping' toward a paved-road security model where compliance is the default state for every developer.
Requirements
- 5+ years of experience in security, compliance, automation, or engineering functions in a fast-paced environment.
- Experience designing or implementing AI-powered automation and agentic workflows.
- Deep experience with Infrastructure as Code (Terraform, Pulumi) and Policy as Code (OPA/Rego) implementation.
- Proficient in Python, Go, or other scripting languages for automation, API interactions, and data parsing.
- Proven experience building modern web applications, including JavaScript/TypeScript and React.
Benefits
Cloudflare offers a complete package of benefits and programs to support you and your family, including medical, dental, and vision insurance, a 401(k) plan with company match, flexible paid time off, and fertility & family-forming benefits.
Equity
This role is eligible to participate in Cloudflare's equity plan.
What Makes Cloudflare Special?
Cloudflare is committed to providing equal employment opportunity for all people and places great value in both diversity and inclusiveness. The company is involved in various initiatives, such as Project Galileo and the Athenian Project, to protect the free and open Internet.